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WE  DIDN’T  BUILD  THIS 
I.T.  SYSTEM. 


ibm.com/ondemand 


Add  a  server  here.  Upgrade  a  storage  solution  there.  Throw  in  a 
database.  And  before  you  know  it,  the  IT  system  that  was  once  your 
pride  and  joy  has  become  an  albatross.  A  complex,  hard-to-manage 
albatross  that’s  holding  your  company  ransom.  Time  for  change. 

WE  JUST  BOUGHT  IT.  NO  WAY  WE’RE  REPLACING  IT.” 

We’re  with  you.  Another  huge  capital  investment  is  not  the  answer. 

Integration  is.  You  have  the  strategies  and  the  systems.  You  just  need 
to  get  your  business  priorities  and  your  technology  aligned.  Cue  IBM 
and  On  Demand  Business.  We’ll  help  you  get  more  from  what  you’ve 
got.  By  linking  departments,  connecting  processes  and  simplifying, 

end  to  end  “GREAT.  BUT  I  CAN’T  START  EVERYWHERE.” 

You  don’t  need  to.  Integration  is  not  an  all-or-nothing  thing.  Small 
changes  can  reap  huge  rewards.  And  our  experience  and  expertise 
can  help  identify  them.  We  understand  the  procedures  that  make  your 
business  tick.  We  know  infrastructure.  We’re  not  fazed  by  complexity. 

We  see  through  it.  Identify  key  issues.  Zero  in  on  the  best  place  to  start 
for  immediate  returns.  Then  make  it  happen.  With  solutions  that  are 
platform  and  system  friendly,  but  more  importantly,  business-strategy 

friendly  too  “THAT  WOULD  WORK,  I  THINK” 

It  would.  We  help  thousands  of  companies  do  it  every  day.  Join 
them.  Create  the  manageable,  affordable,  dependable  infrastructure 
you  always  planned.  You’ll  find  all  you  need  at  ibm.com/ondemand 

INSIGHT,  SERVICES  AND  SOLUTIONS  FOR  AN  ON  DEMAND  WORLD. 

QQ  DEMAND  BUSINESS 


IBM,  the  IBM  logo  and  the  On  Demand  logo  are  registered  trademarks  or  trademarks  of  International  Business  Machines 
Corporation  in  the  United  States  and/or  other  countries.  Other  company,  product  and  service  names  may  be  trademarks  or 
service  marks  of  others.  ©2004  IBM  Corporation.  All  rights  reserved. 
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Wall  Street  without  walls. 


They  have  no  trading  floor,  just  transactions  executed  faster  than  thought. 
International  Securities  Exchange,  the  world’s  largest  equity  options 
exchange,  conducts  all  trading  electronically.  ISE  needed  enormous  capacity, 
requiring  unprecedented  computing  power.  As  their  partner,  HP  Services 
designed  a  standards-based  solution  that  ensured  instantaneous  processing 
and  automatic  recovery  from  virtually  any  failure.  Since  their  launch  in  2000, 
ISE  has  expanded  capacity  by  several  hundred  percent,  and  now  can  handle 
hundreds  of  thousands  of  transactions  per  second.  So  much  for  walls. 
www.hp.com/adapt  i.l'l 
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the  business  every  step  of  the  way.  By  Malcolm  Wheatley 

MORE  ►  ►► 


4 


CIO  JULY  1,  2004  •  www.cio.com 


The  right  software  can  help  today's  CIO 
become  tomorrow's  corporate  leader. 

It's  amazing  what  the  right  software  can  do  in  the  right  hands.  Just  ask  the 
CIOs  taking  advantage  of  our  management  software  for  utility  computing. 
They've  transformed  previously  complex  disparate  infrastructures  into 
integrated  springboards  for  business  success.  And  they've  capitalized  on 
tomorrow's  trends  while  heading  off  today's  problems,  all  while  maximizing 
their  existing  resources.  To  learn  how  management  software  can  benefit 
your  business,  not  to  mention  your  career,  go  to  ca.com/management3. 


Computer  Associates® 


©2003  Computer  Associates  International,  Inc.  (CA).  All  rights  reserved. 


Columns 

PEER  TO  PEER 
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Secure  Web  access  to  our 
key  applications  without  a 
single  rewrite  was,  by  itself, 
a  huge  benefit  from  using 
Citrix.  In  addition,  Citrix 
cut  annual  telecom  costs  at 
our  370  dealerships  by  40%. ” 


Joyce  Vonada,  CIO 

AutoNation,  inc. 


INFRASTRUCTURE  FOR  THE  ON-DEMAND  ENTERPRISE 

AutoNation  has  rapidly  become  the  largest  retailer 
of  new  and  used  vehicles  in  the  U.S.,  with  370 
dealerships  across  17  states.  With  the  need  to  provide 
secure  access  over  the  Internet  to  key  business 
applications  running  on  widely  diverse  IT  systems, 
AutoNation  turned  to  Citrix.  Without  a  single 
rewrite,  Citrix  made  it  possible  for  12,000  users  to 
access  hundreds  of  applications  over  the  Web. 
AutoNation,  along  with  99%  of  the  Fortune  500, 
uses  Citrix®  software  to  deploy  applications  centrally 
for  secure,  easy,  and  instant  access  to  business-critical 
information — anywhere,  anytime,  from  any  device. 
We  call  it  the  on-demand  enterprise.  And  it’s  helping 
more  than  120,000  of  our  customers  save  money 
and  reduce  IT  complexity.  To  learn  what  Citrix  can 
do  for  your  business,  call  888-820-7918  or  visit 
www.citrix.com. 


CITRIX' 


©2003  Citrix  Systems,  Inc.  All  rights  reserved.  Citrix  is  a  registered  trademark  of  Citrix  Systems.  Inc  in  the  U.S.  and  other  country 
other  trademarks  and  registered  trademarks  are  the  property  of  their  respective  owners. 
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Profiles  in  Business 


Every  business  is  a  team  of  individuals.  And  if  you  can  maximize  teamwork,  you’ll 


maximize  productivity— which  is  where  Nokia  comes  in.  Everything  we  make,  from 
advanced  messaging  devices  to  secure  mobile  connectivity  offerings,  is  engineered  to 
give  your  team  fel  the  power  to  work  faster  and  smarter.  The  payoff  can  be 


immediate: 


Mr.  "I  Have  Security  Issues" 


The  Nokia  6820  Messaging  Device 


Torturous  Trevor  the  Technoholic 


R.O.  Ida,  The  Chief 
Financial  Officer 


Working-from- 
Home  Walter 


Mobility:  Teamwork 


o 


How  to  be  more  competitive,  more  productive,  and,  uh,  more  in  sync. 


improved  coordination,  faster  growth.  And  because  Nokia  £ 

Nokia  security  appliance 

supports  a  variety  of  access  methods  and  devices,  your  people  can  work  on  their 
own  terms  while  taking  care  of  business  demands.  Learn  more  today.  And  give  your 
team— and  your  business— the  advantage  of  more  mobility.  Anytime,  anywhere, 

i - O 


and  on  virtually  any  device. 
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Preferences 
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Nokia  One  Business  Sen/er 


Learn  how  to  mobilize  your  team  and  increase  business 
productivity.  Download  “The  Anytime,  Anyplace 
World”  white  paper  at  »nokiaforbusiness.com 
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ADD  A  COMMENT 

Is  Sarbanes-Oxley  the  Revenge 
of  the  Bean  Counters? 

The  Sarbanes-Oxley  Act,  a.k.a.  Sarbox,  mandates  that 
CFOs  now  have  to  vouch  for  the  processes  used  to  add 
up  the  numbers  or  they  could  go  to  jail  (see  The  Sarbox 
Conspiracy,  Page  58).  Sane  people  don’t  relish  the 
prospect  of  prison,  so  who  can  blame  the  CFO  for 
hanging  over  your  shoulder?  But  there  are 
many  CIOs  who  view  such  finance  depart¬ 
ment  visitations  as  only  the  beginning. 

Is  Sarbox  just  a  wedge  in  the  door 
for  the  accounting  profession  to  get 
control  of  the  business  again?  Will  you 
be  the  hero  who  automates  and  streamlines  so 
that  the  cost  of  compliance  goes  down  overtime?  Or  will 
your  narrow  focus  on  IT-specific  controls  condemn  you 
to  a  future  as  a  subset  of  finance?  Go  to  the  online  version 
of  this  article  and  ADD  A  COMMENT. 


Check  Out  Our 
Sister  Sites 


■  CMO  Magazine:  For 

the  chief  marketing 
officer  in  your  life, 
it’s  the  newest 
publication  from  our 
parent  company,  CXO 
Media.  The  print  version  of  CMO 
debuts  in  September,  but  you 
can  get  a  preview  online  now  at 
www.cmomagazine.com.  Tell  your 
marketing  colleagues  to  sign  up 
for  the  free  e-newsletter  too. 

■  CSO  Magazine:  In  the  July  issue, 
we  wonder  why  in  a  world  of 
escalating  data  theft  and  regula¬ 
tory  requirements,  experienced, 
talented  CISOs  say  information 
security  is  being  marginalized. 
Look  for  the  article,  Locked  Out, 
at  www.csoonline.com. 

■  Darwinmag.com:  Tired  of 
explainingthe  basics,  like  RSS 
feeds,  cookies  and  encryption,  to 
your  executive  colleagues?  Let 
Darwin  do  it  for  you.  Updated 
weekly  at  www.darwinmag.com. 
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If  you  don’t  have  time  to  go  to  the  web¬ 
site,  let  www.cio.com  come  to  you.  Our 
array  of  e-newsletters  offers  targeted 
need-to-know  subjects,  such  as: 

►  Web  Business  Insights 

►  Leadership  &  Management 

►  Security  &  Privacy 

►  CIO  Job  Listings 

And,  the  CIO  Insider  puts  the  direct 
links  to  where  you  want  to  go  right  in  your 
inbox,  twice  a  week. 

What’s  more,  they're  all  free.  To  sub¬ 
scribe,  go  to  www.cio.com/newsletters. 


LEND  US  A  HAND 

Take  a  Survey 

Help  us  make  www.cio.com 
the  best  site  it  can  be  for 
your  needs.  Take  our  new 
60-Second  Survey  and 
let  us  know  what  you’re 
looking  for,  what  you’d 
like  to  read  more  about 
and  how  we  can  do  a  better 
job.  Find  the  surveys  and 
us  a  helping  hand  at 
www.cio.com/60secondsurvey. 
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the  Oracle  Platform 

Database  lOg 
Application  Server  lOg 


Common  LDAP  directory 
Unified  security  model 
Common  administration 
Automated  space  management 


Engineered  to  work  together 


oracle.com/platform 
or  call  1.800.633.0753 


Copyright  ©  2004,  Oracle  Corporation.  All  rights  reserved.  Oracle  is  a  registered  trademark  of  Oracle  Corporation  and/or  its  affiliates. 


The  only  effective  security  is  preemption.  This  preemptive  power  is  only  available  with  the  Proventia™  Security  Platform  from  Internet  Security  Systems. 
When  software  security  flaws  are  discovered,  Internet  Security  Systems’  world-renowned  research  team  updates  Proventia  to  immediately  shield  against 
any  attacks  targeting  weak  spots.  Regardless  of  the  size  of  your  business,  this  new  standard  in  Internet  security  can  help  keep  you  off  the  path 
to  disaster  and  reduce  your  total  cost  of  ownership  -  In  fact,  when  we  manage  Proventia  for  you,  well  even  guarantee  protection.  Need  proof? 

Get  your  free  whitepaper,  Preemptive  Protection:  Setting  a  New  Standard  in  Security,  at  www.iss.net/proof/cio  or  call  800-776-2362. 


FIREWALL  I  ANTIVIRUS  I  INTRUSION  PREVENTION  I  WEB  FILTERING  I  MAIL  SECURITY  I  MANAGED  SERVICES  I  VULNERABILITY  ASSESSMENT 


www.iss.net 


ISS  PROTECTION 


Internet  Security  Systems® 

Ahead  of  the  threat. 


ISS  PREEMPTS  THE  THREAT.  OTHERS  REACT  TO  IT. 


InBox 

Reader  Feedback 


DEFENDING  IRS  MODERNIZATION 

The  April  1,  2004,  cover  story,  “For  the  IRS  There's  No  EZ  Fix,”  is  a  fascinating 
treatment  of  a  very  complex  subject.  As  a  career  civil  servant,  veteran  of  the  IRS 
modernization  and  the  chief  of  staff  to  the  IRS  CIO  for  two  years  (ending 
February  2003),  I  found  some  statements  and  conclusions  at  odds  with  my 
own  experience  in  the  modernization  effort. 

While  such  generalizations  as  “the  IRS’s  entrenched  bureaucracy,” 

“midlevel  IRS  managers  never  bought  into  the  concept"  and  “business 
unit  leaders  were  not  held  accountable”  make  for  stimulating  prose, 
they  don’t  add  much  to  the  plethora  of  information  on  modernization’s 
problems.  Anecdotal  conversations  with  contractors  working  on  the  current 
modernization  have  suggested  that  IRS  staffers  were  no  more  averse  to  change  than  other 
organizations  facing  a  massive  modernization.  If  anything,  the  rumors  of  IRS  staff  intransigence 
were  overstated. 


In  reality,  all  the  players  in  the  IRS’s 
efforts  to  modernize  its  aging  IT  infra¬ 
structure  are  working  hard  at  what  con¬ 
tinues  to  be  one  of  the  most  vexing  IT 
management  challenges.  Unfortunately, 
the  program  continues  not  to  meet  both 
internal  and  external  expectations,  result¬ 
ing  in  lots  of  blame  to  share  among  all 
the  participants.  It  is  easy  to  vilify  the  IT 
careerists,  but  how  many  major  corpo¬ 
rations  have  watched  their  top  IT  execu¬ 
tive  position  turn  over  five  times  in  eight 
years  and  found  the  IT  department  deliv¬ 
ering  on  time  and  budget? 

Dennis  Szymanski 
Deputy  CIO 
U.S.  International  Trade  Commission 
demiis.szymanski@usitc.gov 

Senior  Editor  Elana  Varon  responds:  The 
conclusions  in  the  story  are  supported  by 
evidence  from  project  audits  conducted 
by  the  Treasury  Inspector  General  for 
Tax  Administration,  along  with  inter¬ 
views  with  individuals  who  have  been 
involved  with  the  agency’s  Business  Sys¬ 
tems  Modernization  in  various  capacities. 

The  story  also  provides  detail  about 


the  role  of  the  vendors  in  creating  cost 
overruns  and  delays  and  does  not  lay  all 
blame  for  these  failures  at  the  feet  of  the 
IRS.  But  the  evidence  makes  clear  that 
this  is  where  the  buck  stops. 

In  “No  EZ  Fix,”  you  make  the  follow¬ 
ing  statement:  “Those  familiar  with  the 
Master  File  say  it  is  poised  for  a  fatal 
crash  that  would  shut  the  government 
down.”  Very  dramatic,  but  only  par¬ 
tially  true. 

If  the  Master  Files  were  to  fail,  it 
would  have  a  significant  and  deleterious 
impact  on  the  U.S.  economy,  causing  the 
government  to  likely  slow  down,  but  not 
shut  down.  The  real  error  in  your  state¬ 
ment,  however,  is  where  you  state  that 
those  systems  are  near  failing,  which  is 
nowhere  near  correct.  It  is  true  that  the 
software  has  been  in  place  since  the  early 
1960s,  but  that  is  proof  of  its  soundness, 
not  proof  that  it  is  ready  to  fail.  Those 
systems  are  written  in  IBM  Assembly 
Fanguage  Compiler  (AFC),  a  difficult 
language  to  master,  which  is  why  peo¬ 
ple  are  afraid  to  develop  with  it. 

But,  year  after  year,  those  programs 


are  updated  and  run  almost  flawlessly. 
Some  of  the  delays  in  the  new  system 
are  attributable  to  the  problems  the 
vendors  are  having  keeping  up  with 
software  changes  caused  by  the  constant 
tinkering  Congress  does  with  the  tax 
code  every  year — something  the  IRS  per¬ 
sonnel  programming  in  AFC  seem  capa¬ 
ble  of  handling. 

Bill  Johnson 

Executive  Vice  President 
Information  Systems  Consulting 
Group  Inc.  (InSysCo) 
bjohnson@insysco.  com 

THE  I.T.  DEBATE  CONTINUES 

Don  Tapscott’s  critique  of  Nicholas 
Carr’s  assertions  about  IT  and  competi¬ 
tive  advantage  (“The  Engine  That  Drives 
Success,”  May  1,  2004)  is  wishful  think¬ 
ing  built  on  Tapscott’s  misconception 
that  the  “I”  in  IT  is  a  noun  and  not  an 
adjective.  Tapscott  says,  “It’s  all  about 
the  information.”  Carr’s  point  exactly — 
technology  is  not  the  information.  Tech- 
nology  is  distinct,  and  it  is  increasingly 
commoditized. 

Tapscott  and  like-minded  thinkers  fail 
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We  re  not  Thor 

We  just  make  his  hammer 


Developing  a  device  that  connects  the  world.  Testing  the 
water  to  make  sure  it  stays  clean.  Discovering  a  cure  that 
keeps  the  world  safe.  They  all  require  the  same  thing:  the 
right  tools. 


With  Agilent  we  make  sure  you  have  them.  Our  experience 
in  the  fields  of  electronics,  communications,  life  science 
and  chemical  analysis  gives  us  a  unique  perspective 
shared  by  no  other  company  in  the  world.  And  we  build 
that  expertise  into  every  product  we  make,  from  integrated 
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ro  accept  that  information  is  solely  the 
mistress  of  human  intelligence.  This, 
along  with  a  host  of  other  human  factors, 
provides  the  only  sustainable  strategic 
advantages.  Again  and  again,  Tapscott 
attempts  to  attribute  to  IT  results  that  are 
driven  by  basic  business  factors — the 
usual  players  of  vision,  strategy,  risk-tak¬ 
ing,  investment,  brand  asset  management 
and  luck.  To  gain  competitive  advantage, 
winning  combinations  of  human  factors 
continuously  take  advantage  of  the  mar¬ 
ket,  regulatory  and  technology  forces 
available  to  all. 

The  one  exception  is  technology  ven¬ 
dors.  Certainly  they  must  continue  to 
invent  new  technology  to  stay  ahead. 
However,  as  soon  as  they  do,  the  rest  of 
us  benefit  from  equal  access  to  the  tech¬ 
nology.  This  market  separation  into  sup¬ 


pliers  and  consumers  of  technology  is 
the  turning  point.  New  technology,  like 
a  new  piece  of  regulation,  is  available 
to  all  equally.  Some  will  apply  it  to  their 
advantage  more  quickly  than  others. 

So,  yes,  the  companies  that  first  put 
new  technology  together  with  a  good 
business  plan,  great  brand  management, 
winning  customer  and  supplier  rela¬ 
tionships,  and  so  on  will  have  a  com¬ 
petitive  advantage  and  set  the  barriers 
for  any  company  that  wishes  to  com¬ 
pete.  And,  thus,  keeping  on  top  of  tech¬ 
nology  is  important — it’s  the  price  of 
being  in  business.  But,  like  adding 
lemon  flavor  to  Coke,  any  advantage  is 
short-lived  absent  a  portfolio  of  other 
nontechnology  factors.  It’s  the  other 


factors,  not  the  technology  that  make 
the  difference. 

Kenneth  Roberts 
Naritus  Inc. 
kroberts@naritus.com 

Nicholas  Carr  skirts  around  the  impor¬ 
tant  point  that  it  is  not  IT  per  se  that 
creates  competitive  advantage,  but  the 
interaction  of  IT  and  a  variety  of  differ¬ 
ent  resources  (“The  Argument  Over 
IT,”  May  1,  2004).  IT  is  merely  the  cat¬ 
alyst  that  facilitates  leveraging  of  other 
resources  with  the  objective  of  creating 
unique,  inimitable  capabilities.  These 
capabilities  are  not  easy  to  replicate, 
despite  the  fact  that  the  core  IT  might  be. 

Take,  for  instance,  a  travel  agency  that 
has  a  broad  product  line  and  unique  rela¬ 
tionships  with  its  various  suppliers  of 


products  and  services.  It  can  use  IT  to 
configure  these  services  and  match  them 
with  data  mined  from  its  customer  base, 
creating  more  value  for  its  customers. 
Competitors  might  replicate  the  under¬ 
lying  IT  (data  mining  software,  front-end 
services  on  website  and  so  on),  but  that  is 
entirely  irrelevant  to  competitive  advan¬ 
tage.  It  is  the  company’s  ability  to  lever¬ 
age  its  uniqueness  (relationship  assets, 
customer  data,  other  tacit  knowledge  in 
employees’  heads  that  spawns  innova¬ 
tion)  through  IT  that  creates  distinctive 
value. 

Further,  much  IT  investment  might 
remain  dormant  until  the  right  condi¬ 
tions  arise — when  it  can  facilitate  agile 
responses  to  opportunities.  A  company 


that  has  the  resources,  including  IT,  to 
take  advantage  of  that  opportunity  (for 
example,  a  product-market  gap)  will  gain 
an  advantage  over  another  that  does  not. 

Carr  sidesteps  this  point  while  hold¬ 
ing  onto  his  dangerous,  oversimplistic 
position. 

Varun  Grover 

William  S.  Lee,  Distinguished  Professor  of  IS 

Clemson  University 
vgrover@clemson.  edu 

Basic  economics  says  that  productiv¬ 
ity  depends  on  the  mix  of  capital  and 
labor.  As  the  former  CIO  for  the  fed¬ 
eral  government,  let  me  assure  you  that 
the  only  way  government  is  going  to 
become  productive  again  is  to  better  use 
capital,  and  the  only  capital  that  matters 
is  IT. 

Poor  business  processes  exist  with  or 
without  IT,  but  good  processes  require 
IT.  Similarly,  all  information-intensive 
industries  are  dominated  by  the  most 
agile,  responsive  companies.  Only  IT 
can  accelerate  response  time.  Sure  it  has 
to  be  applied  smartly,  but  IT  is  a  neces¬ 
sary  component  of  business  or  govern¬ 
ment  agility. 

Mark  A.  Forman,  Executive  VP, 
Worldwide  Services,  Cassatt  Corp. 

Former  U.S.  Administrator  for 
E-Government  &  IT  in  the  Office 
of  Management  and  Budget 
mark.forman@cassatt.com 

Whether  or  not  Carr’s  comparisons  of 
IT  to  prior  infrastructures  are  valid,  his 
arguments  that  IT  does  not  yield  strate¬ 
gic  differentiation  have  been  demon¬ 
strated  over  and  over  in  the  experiences 
of  companies  in  every  industry.  Those  of 
us  who  have  helped  companies  imple¬ 
ment  new  technologies  repeatedly  see 
the  reasons  for  this  failure  to  achieve 
strategic  differentiation. 

First,  technology  initiatives  are  so 
often  underestimated,  and  pressures  for 
“scope  control”  so  great,  that  the  strate¬ 
gic  possibilities  in  projects  are  surren- 
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dered  as  companies  scale  back  just  to 
meet  the  core  business  requirements. 
This  isn’t  just  due  to  bad  planning  or 
poor  execution,  but  also  a  consequence 
of  the  complex  collection  of  technolo¬ 
gies  that  must  be  coordinated. 

Second,  too  many  technology  initia¬ 
tives  are  driven  by  the  desires  and  ideas  of 
the  technology  organization  rather  than 
by  business  imperatives.  Thus,  they  fail 
to  create  “the  complex  system  of  activities 
and  resources  and  such”  that  Carr  points 
out  as  the  components  of  strategic  capa¬ 
bilities.  Technology  executives  too  often 
act  like  their  own  vendors  when  they 
interact  with  business  executives.  Tech¬ 
nology  is  presented  as  the  answer  before 
the  issue  is  understood. 

So,  rather  than  argue  about  whether 
technology  is  theoretically  a  source  of 
strategic  advantage,  CIOs  need  to  rec¬ 


ognize  that  technology  has  very  rarely 
delivered  strategic  advantage. 

Russell  Jones,  President 
Decisive  Technology  LLC 
rjones@decisivetech.net 


APOLOGY 

Due  to  a  failure  of  editorial  checks  and 
balances,  we  made  a  grossly  inappropri¬ 
ate  analogy  regarding  Acxiom,  the  Little 
Rock,  Ark.,  data  services  provider,  in  the 
sidebar  accompanying  the  June  1,  2004, 
cover  story  (“Privacy  Is  Your  Business”). 
Not  only  is  the  analogy  offensive  and 
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Send  your  thoughts  and  feedback  to 
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out  of  proportion,  it  doesn’t  make  sense 
in  the  context  of  the  story  in  which  it 
appears.  While  the  story  points  to  the 
inherent  risk  in  aggregating  such  a  mas¬ 
sive  amount  of  personal  information  in 
one  place,  it  also  highlights  the  company’s 
substantial  efforts  to  protect  both  the 
security  and  privacy  of  the  data  of  which 
it  is  the  guardian.  We  deeply  regret  having 
run  the  comment,  and  we  apologize  to 
Acxiom’s  employees,  shareholders  and 
customers,  and  to  the  readers  of  CIO. 

CORRECTION 

In  “How  to  Become  a  Fixture”  in  our 
April  1,  2004,  issue,  we  incorrectly 
reported  the  tenure  of  Ecolab  COO 
Douglas  M.  Baker  Jr.  He  has  been  with 
Ecolab  for  15  years  and  serving  in  vari¬ 
ous  leadership  positions.  We  regret  the 
error. 
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When  it  comes  to  business  application 
software  many  commitments  aren’t  being 
honored.  Installation  is  often  neither  on 
time,  nor  on  budget  and  much  of  the 
software  goes  underutilized. The  market  is 
asking  for  something  different.  That’s  why 
Lawson  is  leading  the  way  by  providing 
software  and  services  that  put  time  on 
your  side.  Our  applications  will  do  what 
we  say  they  will.  Our  upgrades  will  mean 
measurable  improvements.  And  our  ability 
to  maximize  your  time  will  help  keep  you 
competitive.  After  all,  seeing  is  believing. 


i,- 

25  or  visit  www.lawson.cor 
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It’s  Time. 


Anyone  can  create  feel-good 
technology  acronyms. 

We  thought  we’d  master  the 

one  that  matters. 


Compuware 

Corporation 

Largest  Testing 
Tools  Vendor 

Largest 

Hardware  Vendor 

($1.3  billion) 

($0.5  billion) 

($91  billion) 

Application  Debugging 

• 

(Java,  Windows,  Mainframe) 

Application  Quality 

(Java,  Windows,  Mainframe) 

Application  Performance 

(Java,  Windows,  Mainframe) 

Dear  Technology  Executive, 


You  don’t  have  an  unlimited  budget  and  we  understand  that.  At  Compuware,  we’ve  saved 
organizations  between  30%  and  50%  on  their  software  quality'  investments— all  while  providing 
the  most  complete  set  of  products  and  services  in  the  industry  today. 

To  achieve  the  results  from  your  IT  projects  that  your  business  users  demand  and  deserve,  it  is 
crucial  to  address  quality'  throughout  the  entire  application  life  cycle  on  all  major  platforms. 

That’s  why  Compuware  delivers  quality  solutions  for  development,  QA  and  operations  across  your 
entire  portfolio.  You  and  I  both  know  that  most  application  defects  and  costs  are  introduced  in 
development — and  that  these  problems  are  painful  and  expensive  to  solve  in  production.  With  your 
budget  and  reputation  at  stake,  wouldn’t  you  rather  have  a  relationship  with  one  vendor  that  offers 
a  broad  set  of  solutions  rather  than  a  dozen  niche  prima  donnas? 


Compuware  products  are  in  use  at  98  of  the  Fortune  100  companies — like  Time-Warner.  They  were 
looking  for  better  results,  and  Compuware  saved  them  up  to  50%  on  the  license  and  maintenance 
fees  they  were  paying  to  other  vendors  who  weren’t  helping  them  solve  their  problems. 


So,  if  you’re  tired  of  dealing  w  ith  companies  who  care  more  about  their  bottom  line  than  yours,  call 
1-866-671-7166  or  visit  www.compuware.com/quality  to  learn  more  about  how  we  can  help  you 
deliver  quality  applications,  on  time,  at  a  fraction  of  the  cost. 


Sincerely', 


Peter  Karmanos,  Jr. 
Chairman  and  CEO 
Compuware  Corporation 


COMPUWARE 
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www.compuware.com 
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Rl ACKBERRY 


We  put  a  single  platform,  mobile  data 
and  security  in  your  hands.  Now  you  can 
put  the  enterprise  in  theirs. 


Now  the  BlackBerry  Enterprise  Solution  allows  your  business 
applications  to  be  accessed  virtually  anywhere.*  Whether  it's  email, 
ERP,  CRM  or  document  management  systems,  our  solution  is  built 
on  an  open,  secure  platform  that  can  wirelessly  extend  your  existing 
applications  so  you  won't  have  to  rebuild  or  replace  them.  Best 


The  BlackBerry  Enterprise  Solution  Difference 

•  Provides  advanced  security  including  triple  DES 
encryption,  handheld  password  protection, 
wireless  IT  security  commands  and  policies 

•  Includes  server  software,  wireless  handhelds, 
wireless  service  and  support  programs 
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of  all,  the  BlackBerry  Enterprise  Solution  is  a  proven  platform,  •  Provides  flexible  application  deployment  - 
deployed  by  tens  of  thousands  of  organizations  around  the  world,  Xa"e«nd  “  With  he'P  f,°n'  “ indcpen<,em 
which  means  wrreless  access  to  data  can  be  managed  by  your  IT  .  manageability  and 

Staff  with  more  confidence.  simplified  implementation 


02004  Research  In  Motor  limited  (RlMl  All  ignis  reserved  Blackberry  rs  an  end  to  end  wireless  solution  developed  by 
RIM  RIM.  BteCkBrry  the  BlackBemy  logo  and  the  'envelope  in  motion  symbol  are  trademarks  or  registered  traden  j-ks 
of  RIM  ’Requires  tfertlfi  ly  Enterprise  Se'vet  software  Poor  to  subscribing  to  or  implementing  any  thud  party  products 
or  services,  it  is  your  responsible)  to  ensure  that  the  airtime  service  prowler  you  art  working  with  has  agreed  to  support 
a*  of  the  features  of  the  thud  party  products  and  serv  ices  and  that  you  obtain  the  necessary  licenses  RIM  makes  no 
representation,  wananty  or  guarantee  whatsoever  m  relation  to  the  tturd  party  products  and  servK.es  and  RIM  assumes  no 
liability  whatsoever  m  miat.on  to  the  thud  party  products  and  services  even  if  RIM  has  been  advised  of  Ihe  possibility  of 
such  damages  or  can  amrcrpa.t  such  damages 


BLACKBERRY 


www.BlackBerry.com/go/enterprise 
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CONSIDER  YOUR  NATIONAL  RETAIL  NETWORK.  Consider  the  dots 


Now  we  can  design,  deliver  and  manage  a  data  integration  system  that 
brings  it  all  together.  Converge  every  kind  of  business  network  -  dealers, 
brokers,  suppliers,  customers  -  across  platforms,  across  America.  All  on 
the  strong,  reliable  backbone  of  the  SBC  network.  To  connect  the  dots 
coast  to  coast,  talk  to  your  SBC  account  representative,  sbc.com/dots 

GOING  BEYOND  THE  CALLf 


SBC 


Edited  by  Michael  Goldberg 


GOV 


UPDATE 


Slow  March  Toward 
Online  Government 


WHEN  PRESIDENT  BUSH  took  office  in 
2001,  his  official  management  agenda  set 
the  expansion  of  e-government  as  one  of 
its  cornerstones.  A  year  later,  Bush  signed 
the  E-Gov  Act,  which  promised  a  leaner, 
more  efficient  federal  government  by,  among 
other  things,  making  it  easier  for  citizens  to 
interact  with  agencies  online  (see  “A  More 
Perfect  Union,”  www.cio.com/prmtlinks). 
Yet,  despite  this  emphasis,  a  report  by  the 
General  Accounting  Office  says  progress 
has  been  mixed,  due  in  no  small  part  to  a 
lack  of  funding. 

The  GAO’s  report,  released  in  March, 
looked  at  the  progress  of  25  high-profile, 
e-government  projects  sponsored  by  the 
Office  of  Management  and  Budget  since  2001. 
The  GAO  found  that,  of  the  91  objectives 
for  these  initiatives — such  as  developing 
a  business  case  for  consolidating  federal 


payroll  systems — approx¬ 
imately  36  percent  were 
fully  or  substantially 
achieved  and  40  percent 
were  partially  achieved 
after  two  years.  For  the 
rest,  no  significant 
progress  was  made  and 
a  few  were  abandoned 
as  impractical  or  inap¬ 
propriate.  (See  “Four  E- 
Government  Projects: 

Status  Report,”  Page  34, 

for  more  on  four  of  the  _ 

initiatives.)  In  May, 

another  e-gov  scorecard,  this  one  a  status 
report  from  the  OMB,  showed  that  only 
two  agencies — the  State  Department  and 
the  Agency  for  International  Develop¬ 
ment — improved  their  scores  from  Decern 


ARCHIVAL  RECORDS 

Preserving  July  4th 

THOMAS  JEFFERSON  took  a  couple  of  sleep- 
deprived  days  to  craft  the  Declaration  of 
Independence,  spelling  out  a  new  nation's 
rationale  for  breaking  with  the  British  crown. 
If  only  preserving  the  calfskin  parchment 
on  which  he  and  others  pledged  their  lives, 
fortunes  and  sacred  honors  were  that  simple. 

This  Independence  Day  marks  the  first  July 
4th  celebration  since  the  federal  government 
installed  new  encasements  last  September 
for  the  document,  signed  228  years  ago.  It’s 


on  display  at  the  National  Archives  in  Washington, 
D.C.,  along  with  the  Constitution  and  the  Bill  of 
Rights. 

It  took  more  than  two  years  for  engineers  and 
scientists  from  the  National  Institute  of  Standards 
and  Technology  and  NASA  to  complete  their  work 
on  new  gold-plated,  titanium-framed  encasements 
for  the  documents.  The  parchments  inside  the 
cases  rest  on  cellulose  paper,  set  beneath  laminated 
tempered  glass,  in  a  bath  of  inert  Argon  gas.  An 
optical  system  in  the  encasement  base  detects 
infiltrations  of  water  or  oxygen. 

The  encasements  replace  1951  models  and  are 
designed  to  last  a  century.  Which  makes  us  wonder 
what  archives  will  look  like  in  2104. 


STAT 


President  Bush  made 
expansion  of  e-government 
a  management  priority,  but 
progress  has  been  slow  due 
to  a  lack  of  federal  funding. 


ber  2003  to  March  of  this  year. 

If  one  drinks  out  of  an  e-gov  glass  that’s 
half-full,  then  the  fact  that  many  of  the 
original  objectives  have  been  achieved  speaks 
for  progress.  After  all,  the  government  has 
a  two-century  history  as  a  highly-siloed 
bureaucracy,  and  massive  transformation 
isn’t  going  to  take  place  overnight,  book¬ 
ing  at  a  half-empty  glass,  the  36  percent 
success  rate  is  disappointing,  especially 
given  that  the  projects  were  chosen  based 
on  their  likelihood  of  being  deployed  in  1 8 
to  24  months.  And,  despite  the  success 
of  some  e-gov  projects,  many  citizens  still 
find  it  just  as  difficult  to  interact  with  the 
government  online. 

back  of  funding  for  the  projects  is 
one  obstacle.  The  E-Gov  Act  authorized 
$345  million  to  pay  for  these  and  other 
projects  over  four  years,  but  the  actual 

Continued  on  Page  34 
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Make  breakthrough  decisions. 

And  make  an  impact. 

Go  beyond  business  intelligence  with  SAS",  the  one  software  that  delivers  accurate  information  to 
everyone.  So  you  can  drive  profits,  reduce  costs,  manage  risk  and  transform  the  way  you  do  business. 
Now  that  SAS"9  has  arrived,  you  can  take  advantage  of  our  proven  predictive  analytics  through  a  single, 
scalable  platform  that  spans  the  enterprise.  And  interact  with  SAS  by  choosing  the  custom-tailored 
interface  that  fits  the  way  you  work.  Give  us  a  call  at  1  866  270  5739  for  a  free  demonstration  of  today’s 
SAS.  Or  visit  our  Web  site  for  a  quick  interactive  tour. 

www.sas.com/breakthrough 

The  Power  to  Know* 


SAS  and  all  other  SAS  Institute  Inc.  product  or  service  names  are  registered  trademarks  or  trademarks  of  SAS  Institute  Inc.  in  the  USA  and  other  countries.  ®  indicates  USA  registration. 
Other  brand  and  product  names  are  trademarks  of  their  respective  companies.  ©  2004  SAS  Institute  Inc.  All  rights  reserved.  2761 77US. 0404 


Online  Government 

Continued  from  Page  32 

funds  allotted  by  Congress  have  been 
inadequate.  In  fiscal  2003  and  2004,  the 
administration’s  request  for  a  total  of 
$90  million  was  slashed  by  congressional 
appropriations  committees  to  $8  million. 
According  to  Dave  McClure,  vice  president 
for  e-government  at  the  Council  for  Excel¬ 
lence  in  Government  think  tank,  members 
of  Congress  have  trouble  understanding 
the  value  of  a  single  fund  that  supports  cross¬ 
agency  initiatives.  Many  e-gov  projects 
involve  integrating  systems  among  multiple 
agencies  and  need  a  source  of  money  to 


make  this  integration  happen. 

This  funding  is  hard  to  come  by,  and  this 
frustrates  federal  CIOs.  In  a  recent  study 
conducted  by  the  Information  Technology 
Association  of  America  and  accounting 
firm  Grant  Thornton,  CIOs  noted  that 
resource  needs  for  e-gov  were  often  identi¬ 
fied  after  budgets  had  been  developed,  and 
they  expressed  frustration  that  they  had  to 
dig  up  funds  from  elsewhere  in  their  budg¬ 
ets  to  advance  e-government. 

The  good  news  is  that  CIOs  are  dedicated 
to  advancing  e-government,  despite  the  diffi¬ 
culties.  Department  of  Health  and  Human 
Services  CIO  Charles  Havekost  and  repre¬ 
sentatives  from  10  other  agencies  are  building 


Grants.gov,  a  portal  for  government  grant 
applicants,  and  have  established  an  execu¬ 
tive  board  that,  in  one  of  its  first  acts,  voted 
on  a  funding  plan.  Everyone  agreed  to  con¬ 
tribute  from  their  own  budgets.  Havekost 
says  the  consensus  helped  generate  the  nec¬ 
essary  executive  support  to  keep  the  project 
moving  forward. 

The  not-so-great  news:  Connecting 
citizens,  businesses  and  the  government 
with  technology — and  changing  the  culture 
of  agencies  that  are  used  to  operating  in 
silos — is  going  to  take  years.  “Every  time  I 
go  back  and  look  at  the  law,  I’m  reminded 
of  how  much  is  in  it,”  says  McClure. 

-Todd  Datz 
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Create  a  single  point  of  access 

Create  website  ( www.regulations.gov ) 

Help  local,  tribal,  state  and  federal  public 

o 

CL 

grant  applications  and 

for  free  online  tax  preparation 

for  citizens  to  post  comments  to 

safety  agencies  achieve  interoperability 

Z> 

Q_ 

management. 

and  filing  services. 
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such  as  economic  analyses,  is  still 
underdevelopment. 

Safecom-approved  equipment. 

Objectives  achieved 


Objectives  achieved 


^frially  achieved 


No  significant  progress 
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Indian  Election  Shakes  Markets 

Nation’s  IT  industry  leaders  insist  leftward  political  shift  won’t  hurt  them 


WHEN  THE  CONGRESS  PARTY  won  India’s 
election  on  May  13,  the  country’s  stock  markets 
plunged  on  worries  that  leftists  would 
pressure  the  newly  formed  government  to 
derail  economic  reforms.  But  Congress 
Party  leaders  moved  quickly  to  state  that 
their  policies  would  be  pro-investment.  And 
leading  IT  and  outsourcing  industry  players 
insisted  that  investors  would  not  be  harmed 
by  the  change  in  India’s  government. 

The  Bombay  Stock  Exchange’s  30-share 
index  in  Mumbai  plummeted  more  than 
564  points  (11  percent)  on  May  17,  and  it 
was  mired  close  to  that  level  on  June  1. 

Although  the  fall  also  dragged  down  tech 
stock  prices,  the  stock  market  downturn  was 
not  directly  linked  to  the  tech  sector,  says 


Kiran  Karnik,  president  of  the  National 
Association  of  Software  and  Service 
Companies  (Nasscom)  in  Delhi.  Nasscom 
is  the  leading  industry  group  for  India’s 
large  software  services  and  business 
process  outsourcing  (BPO)  industry. 

“There  was  a  little  bit  of  concern  among 
some  customers  abroad,  and  we  did  get  some 
calls  after  they  heard  what  happened  to  the 
stock  markets,”  says  Karnik.  “But  they  under¬ 
stand  that  all  this  is  a  transient  reaction,  and 
not  based  on  anything  substantial.” 

In  fact,  new  Prime  Minister  Manmohan 
Singh  is  an  Oxford-educated  economist 
who  believes  government  must  create  self- 
sustaining  economic  growth.  Singh  became 
prime  minister  after  Congress  Party  leader 


Sonia  Gandhi  declined  the  job. 

After  the  election  and  stock  market  fallout, 
IT  industry  players  in  India  sought  to  reassure 
customers  abroad. 

IT  and  BPO  industry  sources  do  not 
expect  the  new  government  to  reverse 
policies  that  help  their  industries,  which  are 
key  foreign  exchange  earners  and  provide 
employment  to  a  large  segment  of  India’s 
urban  population.  “The  IT  and  BPO  indus¬ 
tries  in  India  contribute  significantly  to 
employment  and  foreign  exchange  revenues, 
and  any  government  coming  to  power  will 
not  want  to  change  that,  even  if  they  think 
they  have  to  focus  on  rural  development,” 
says  Prakash  Gurbaxani,  chief  executive 
officer  of  TransWorks  Information  Services, 
a  Mumbai-based  BPO  company. 

And  the  Communist-led  government  in 
West  Bengal  state  has  declared  the  IT  and 
BPO  industries  as  essential  as  electric  and 
water  utilities,  Karnik  says.  -John  Ribeiro 
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Some  IT  projects  are  just  dead  weight. 
At  a  million  dollars  an  ounce, 
it's  worth  figuring  out  which  ones. 


PeopleSoft  ESA  helps  you  balance  IT  project  investments  to  deliver  the  greatest  value  to  your  business. 

PeopleSoft  ESA  for  IT  is  the  solution  to  improve  IT  governance,  and  ensure  your  organization  is  properly 
aligned  with  the  company's  overall  business  objectives.  Bring  discipline  to  project  evaluation  and  approval. 
Report  back  to  business  owners  cost-effectively  and  in  real  time.  Adjust  rapidly  to  changes  in  business  priorities, 
and  optimize  your  people,  projects  and  processes  for  the  overall  success  of  the  business.  Learn  more  by  visiting 
us  at  www.peoplesoft.com/goto/esa  or  call  1  888  773  8277. 

Enterprise  Service  Automation 
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On  the  Move 


By  Meridith  Levinson 


On  CIOs  Ascending 
to  the  Comer  Office 

Mike  Curran  of  the  Boston  Stock  Exchange  cites 
mentors  (and  struggles)  as  vital  to  career  growth 


MICHAEL  CAPELLAS,  David  Bernauer  and 
Christopher  Lofgren  are  among  the  hand¬ 
ful  of  former  CIOs  who’ve  become  CEOs 
at  big  companies  (MCI,  Walgreen’s  and 
Schneider  National,  respectively).  It’s  rare 
for  an  IT  exec  to  replace  the  I  with  an  E 
after  the  C,  especially  among  companies 
outside  the  technology  industry.  But  long¬ 
time  IT  executive  Mike  Curran,  named 
CEO  of  the  Boston  Stock  Exchange  (BSE) 
in  April,  sees  improving  odds  for  CIOs 
who  want  to  become  CEOs. 

Curran  believes  the  rise  from  CIO 
to  CEO  is  a  natural  progression.  CIOs 
gain  business  expertise  and  learn  about 
the  dependencies  between  different  func¬ 
tions — finance,  sales,  logistics  and  more — 
by  implementing  and  managing  large 
projects  that  require  capital  and  labor. 

Curran,  50,  says  he’s  benefited  from 
several  senior-level  mentors  who  taught 
him  leadership  and  management  skills. 
Three  other  factors  helped  his  climb. 

Exposure  to  diverse  business  settings. 

Curran’s  exposure  to  a  variety  of  compa¬ 
nies,  their  strategies  and  challenges  while 
working  for  12  years  at  consultancies 
such  as  Peat  Marwick  deepened  his 
understanding  of  how  businesses  operate 


and  succeed.  He  could  see  an  IT  imple¬ 
mentation’s  impact  on  a  company’s  oper¬ 
ations.  And,  he  says,  he  could  learn  from 
his  clients’  best  executives.  As  a  partner 
in  Coopers  &  Lybrand  International’s  IT 
consultancy,  Curran  ran  a  profit  and  loss 
center,  a  key  step  for  any  IT  executive 
who  wants  to  move  on  to  bigger  things. 

An  extensive  professional  network. 

One  of  Curran’s  colleagues  at  Coopers  & 
Lybrand,  Ernie  Glickman,  introduced  him 
to  Ken  Liebler,  who  had  then  joined  the 
Boston  Stock  Exchange  as  its  CEO.  At 
the  time,  Curran  was  unemployed;  he  had 
left  his  hectic  position  as  COO  of  Scudder 
Kemper  Investments’  International 
Mutual  Funds  business  in  2001  to  take 
some  much  needed  time  off  with  his  fam¬ 
ily.  Liebler  told  Curran  about  his  plans  to 
use  technology  to  make  BSE  more  com¬ 
petitive,  and  they  discussed  what  role  Cur¬ 
ran  might  play  in  those  plans.  Soon  after, 
he  joined  BSE  as  CIO. 

A  few  years  with  a  struggling  business. 

When  Curran  worked  for  now-defunct 
Apollo  Computer  as  its  manager  of  data 
processing  and  strategic  planning,  the 
workstation  maker  was  losing  business 
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Hallman 


Cinda  Hallman,  a  former  longtime  CIO  and  global  vice  president  at  DuPont,  retired  in  April 
as  CEO  of  Spherion,  a  staffing  and  recruiting  vendor.  The  company  said  in  March  that 
Hallman  had  been  on  medical  leave  since  July  2003.  Thomas  Dolan  can  be  added  to  the 
list  of  CIOs  who've  become  CEOs.  Dolan,  who  is  Cablevision  Systems’  51-year-old  EVP  and  CIO,  will  serve 
as  CEO  of  Rainbow  Media  Enterprises,  the  company  Cablevision  plans  to  spin  off  later  in  2004. 


Vlike  Curran’s 
Resume 


Boston  Stock  Exchange 

CEO  since  April.  Appointed 
COO  September  2003.  Hired 
as  CIO,  September  2001. 


Experience  includes 

•  President,  Scudder  Canada  (2000-2001) 

•  COO,  International  Mutual  Funds,  Scudder 
Kemper  Investments  (2000-2001) 

•  President,  Kemper  Service  Co.  (1998-2000) 

•  CIO,  Scudder  Stevens  &  Clark  (1994-1996) 

•  Manager,  then  partner,  Coopers  &  Lybrand 
(1986-1993) 

Education 

BA  in  Economics  from  Dickinson  College  in 
Carlisle,  Pa.,  in  1976 


to  rival  Sun.  Curran  had  to  carry  out  lay¬ 
offs  and  figure  out  how  to  keep  Apollo’s 
systems  up  with  minimal  staff.  He  left 
Apollo  in  1986,  three  years  before  it  was 
acquired  by  Hewlett-Packard. 

Curran  says  CIOs  who  want  to  lead  as 
CEOs  have  to  have  certain  fundamental 
skills,  like  the  ability  to  negotiate,  manage 
a  profit  and  loss  center  and  develop  a 
business  strategy.  Phil  Schneidermeyer,  a 
recruiter  with  Highland  Partners,  concurs. 
“When  I’m  recruiting  a  CIO,  I’m  looking 
for  someone  who  can  lead,  communicate 
and  motivate  people.  If  I  went  down  the 
hall  and  spoke  to  my  colleagues  that 
recruit.. .CEOs,  they’d  be  looking  for  the 
same  attributes,”  says  Schneidermeyer. 

“If  you  think  and  act  and  apply  your 
skills  toward  the  business’s  mission,”  says 
Curran,  “then  you’ll  be  able  to  move  up 
into  those  [CEO]  ranks.  There  are  very 
few  businesses  today  that  can  be  success¬ 
ful  if  they  can’t  somehow  achieve  a  core 
competency  around  technology.” 
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Symantec 


Whenever  your  people  access  your  network  remotely,  they  open  the  door  to  dangerous  threats  that  could  jeopardize 
your  entire  enterprise.  Symantec  "Client  Security  provides  network-level  protection  for  remote  users  by  integrating 
the  critical  security  tools— antivirus,  firewall  and  intrusion  detection— into  a  single  comprehensive  solution.  It 
automatically  determines  what  security  profile  a  remote  device  requires  and  seamlessly  implements  it  wherever 
that  device  is.  So  even  though  your  people  are  on  the  road,  as  far  as  hackers  and  viruses  are  concerned  they  never 
left  the  building.  To  learn  more,  download  our  free  white  paper,  “Improving  Protection  and  Security  Management 
Through  Client  Security,”  at  http://ses.symantec.com/SCSV2  or  call  800  745  6054. 


' 


Now  your  network  security  works  wherever  your  people  do. 
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‘Wireless  connectivity  and  some  features  may  require  you  to  purchase  additional  software,  services  or  external  hardware.  System  performance, 
will  vary  depending  on  your  specific  hardware  and  software  configurations.  See  http://www.intel.com/products/centrino/more_info  for  more 
Processor  with  HT  Technology  logo  which  your  system  vendor  has  verified  utilize  Hyper-Threading  Technology.  Performance  will  vary  depending 
http://www.intel.com/info/hyperthreading  for  information.  ©2004  Intel  Corporation.  Intel,  Intel  Inside,  Centrino,  Pentium,  Xeon  and  Itanium  are 
or  its  subsidiaries  in  the  United  States  and  other  countries.  All  rights  reserved. 


TECHNOLOGY 


Business  grows  on  smart 
IT  solutions.  And  powerful 
solutions  are  built 
on  Intel®  technology.  From 
desktop  PCs  to  laptops  and 
servers,  Intel  enterprise 
technologies  are  designed  for 
performance  and  reliability. 

So  your  company  can 
maximize  its  competitive 
advantage,  improve  customer 
responsiveness  and  keep 
growing.  For  more  details,  visit 
intel.com/business. 


Mobility  is  everything.  Intel  Centrino 
mobile  technology  enables  a  new 
generation  of  wireless  laptops*— 
thin,  light  and  engineered  to 
enable  extended  battery  life. 


pentium  /] 


Productivity  first.  The  Intel®  Pentium®  4 
Processor  with  HT  Technology  can 
help  your  company’s  PCs  achieve 
up  to  25%  performance  gains**  when 
running  two  applications  at  once. 


Powerfully  versatile.  Intel®  Xeon” 
processor-based  servers  offer 
excellent  price/performance, 
a  wide  choice  of  applications  and 
plenty  of  headroom  to  grow. 


jattery  life,  wireless  performance  and  functionality 
nformation.  “Look  for  systems  with  the  Intel®  Pentium®  4 
>n  the  specific  hardware  and  software  you  use.  See 
rademarks  or  registered  trademarks  of  Intel  Corporation 


Enterprise  performance.  The  Intel 
Itanium®  2  processor  offers 
industry-leading  performance  and 
mission-critical  reliability  to 
handle  your  most  data-intensive, 
business-critical  applications. 


REGULATIONS 

Italians  Debate 
Open-Source 
Bias  in  IT  Buys 

IT  SOUNDED  LIKE  A  GOOD  IDEA  to  officials 
in  Italy’s  central  Tuscany  region.  The  regional 
council  passed  a  law  that  encouraged  govern¬ 
ment  IT  managers  to  use  open-source  software. 

There’s  just  one  problem.  According  to  a  top 
minister  in  Rome,  the  Tuscan  law  is  written  to 
favor  open-source  technology  at  the  expense 
of  competition  with  proprietary  options.  And  the 
way  the  rules  are  written,  it  could  violate  Euro¬ 
pean  Union  free  market  rules. 

The  law  went  into  effect  in  Tuscany  on  Jan.  30, 
citing  as  a  guiding  principle:  “The  promotion, 
support  and  preferential  use  of  solutions  based  on 
open-source  programs,  respecting  the  principle 
of  technological  neutrality.” 

That  apparently  contradictory  wording  sparked 
debate  in  Rome.  Lucio  Stanca,  the  government's 
innovation  and  technologies  minister,  warned 
that  the  guidelines  could  interfere  with  the 
workings  of  the  free  market. 

Stanca,  a  former  IT  professional  and  30-year 
veteran  of  IBM,  told  Italy’s  parliament  in  May  that 
the  Tuscan  law,  “if  incorrectly  interpreted,  could 
influence  equal  opportunities  on  the  market, 
violating  competition  laws  to  the  detriment  of  other 
solutions,  such  as  proprietary  systems  that  can 
be  acquired  by  license." 

Stanca  himself  had  issued  a  directive  in  February 
calling  on  the  civil  service  to  consider  open-source 
applications  in  IT  purchasing  as  a  way  to  broaden 
choices.  “You  have  to  choose  the  best  solution  in 
terms  of  value  for  money,"  Stanca  said.  “My 
approach  is  very  pragmatic,  not  ideological.  If 
they  have  a  preferential  approach,  that  is  wrong.” 

Carla  Guidi,  the  Tuscan  regional  councillor 
responsible  for  IT,  insisted  there  was  no  conflict 
between  the  region  and  the  minister.  The  law  “is 
intended  to  broaden  the  market  and  certainly  not 
to  exclude  anyone,”  she  says. 

The  debate  aside,  Stanca  has  expressed  satis¬ 
faction  at  the  increasing  rate  of  open-source  software 
use  in  the  Italian  civil  service  over  the  past  two  years. 
Italy  is  now  fourth  in  the  world  for  the  percentage 
of  its  IT  professionals  engaged  in  open-source  soft¬ 
ware  development,  Stanca  told  Parliament  recently. 

-Philip  Willan 
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SEARCH 


ENGINES 


An  Online  Battle  Between 
Hate  and  Tolerance 

THE  NEW  YORK  TIMES  ran  an  April  13  story  noting  that,  for  three  years,  an 
anti-Semitic  website  called  JewWatch.com  was  the  first  search  result  listed  when 
anyone  typed  the  word  jew  into  leading  Web  search  engine  Google. 

According  the  article,  the  search  result  was  due  to  the  way  Google’s  algorithms 
ranked  and  returned  sites  and  not  to  any  nefarious  design  on  the  part  of  the  search 
engine  itself.  In  response,  Google  said  it  wouldn’t  change  how  its  algorithms  work, 
nor  would  it  remove  the  Jew  Watch  site  from  its  listings,  because  while  offensive 
to  many,  the  Jew  Watch  site  isn’t  illegal.  Indeed,  a  search  of  “jew”  as  of  mid-May 
still  returned  an  archived  version  of  the  Jew  Watch  site  first,  although  Google 
has  added  a  note  about  offensive  search  results  that  includes  links  to  sites  about 
Judaism  and  the  Anti-Defamation  League. 

The  Times  story  highlighted  the  growing  phenomenon  of  online  hate  sites, 
according  to  SurfControl,  an  e-mail  filtering  company.  From  2000  through  April 
2004,  the  number  of  sites  dedicated  to  hate  and  violence  surged  by  more  than  300 
percent,  increasing  from  2,756  to  10,926.  And  anti-Semitism  isn’t  the  only  mes¬ 
sage  such  sites  spew;  according  to  SurfControl,  there  has  been  a  proliferation  of 
hate  sites  against  African-Americans,  Americans,  homosexuals  and  Muslims. 

Those  offended  by  hate  sites  are  fighting  back  by  preemptively  registering 
domain  names  they  suspect  hate  groups  would  seek.  (Cybersquatting  emerged 
when  some  early  Web  users  registered  the  dotcom  names  of  well-known  brands.) 

Melissa  Hill,  founder  and  webmaster  of  Cybersquatters  Against  Hate 
(, www.cybersquattersagainsthate.com ),  has  made  it  her  mission  to  combat  hate 
sites.  Like  Google,  Hill  doesn’t  think  hate  sites  should  be  banned  or  removed 
from  the  Web.  “The  best  thing  any  search  engine  can  do  is  work  to  improve  its 
technology  so  that  the  most  relevant  sites  are  ranked  the  highest,”  Hill  says.  Hill, 
who  describes  Cybersquatters  as  a  loose  coalition  of  concerned  citizens,  is  doing 
her  best  to  steer  people  away  from  hate  sites  by  advocating  registration  of 
domain  names  similar  to  the  ones  used  by  well-known  hate  groups.  Hence, 
Cybersquatters  has  registered  jewwatch.net ,  aryan-nathms.com  and  wivw.new 
hlackpantherparty.org,  among  others. 

It  could  take  some  time  for  them  to  make  a  difference.  At  press  time  in  mid- 
June,  jewwatch.com  was  still  in  a  user’s  first  screen,  second  from  the  top,  behind 
an  online  encyclopedia.  -Megan  Santosus 
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SPECIAL  ADVERTISING  SUPPLEMENT 


VIRTUALIZED  INFRASTRUCTURE: 

What  Every  CIO  Needs  to  Know 


Virtualized  Utility  Services  Provide  A 
Strategic  Advantage  That  IT  And  Business 
Leaders  Ignore  At  Their  Own  Peril 

magine  not  having  to  agonize  over  huge  capital 
expenditures — yet  still  having  access  to  leading-edge 
performance  and  ample  capacity  to  run  your  key 
applications. 

Imagine  an  end  to  midnight  pages  about  back¬ 
ups  gone  wrong  and  security  patches  to  be  applied; 
an  end  to  long  days  spent  reengineering  network  capacity 


yet  again  to  support  your  organization’s  growth.  Now  imag¬ 
ine  these  visions  becoming  a  reality,  as  they  are  today  for  a 
growing  number  of  IT  organizations  that  take  advantage  of 
virtualized  IT  services. 

The  virtualized  utility  revolution  has  begun.  Enterprise 
leaders  now  possess  the  power  to  deliver  flexible,  easy-to- 
implement  IT  services  for  their  companies,  which  engage 
thousands,  if  not  millions  of  customers  per  day.  Virtualized 
IT  delivered  through  a  utility  model  is  the  key,  offering 
overwhelming  business  benefits,  including  reduced  or 
eliminated  capital  and  equipment  costs,  worldwide  cover¬ 
age,  massive  scalability,  and  on-demand  delivery  capacity. 


Welcome  to 
Virtualized  Services 

Dear  Executive, 

SAVVIS  was  created  to  help  IT 
departments  fix  a  problem. 

Today,  the  vast  majority  of  organi¬ 
zations  find  that  the  infrastructure 
on  which  they  run  applications — 
meaning  technology  like  IP  net¬ 
works,  security,  servers,  storage, 
load  balancers  and  intrusion 
detection  devices — is  very  expen¬ 
sive  and  very  complicated  to  oper¬ 
ate  and  maintain.  Unfortunately, 
many  organizations  have  been 
frustrated  in  their  efforts  to  get 
help  through  outsourcing.  In 
most  cases,  outsourcing  simply 
moved  the  problems  either  to  a 
different  facility  or  to  a  different 


place  on  the  balance  sheet.  Quite 
simply,  the  outsourcing  model 
was  only  a  partial  answer.  There 
was  no  real  strategic  advantage, 
and  savings  were,  at  best,  limited. 

We  have  another  vision.  SAVVIS  is 
focused  on  providing  managed 
infrastructure  services  in  a  differ¬ 
ent  way  using  something  called 
virtualization.  That  means  that 
instead  of  buying  physical  boxes 
for  each  customer  for  every  appli¬ 
cation  they  need,  we  have  created 
huge,  scalable  service  platforms 
enabled  with  a  great  deal  of  our 
proprietary  software  automation. 
The  result  is  that  we  can  deliver 
those  services  at  literally  half  the 
price  of  what  traditional  out¬ 
sourcers  charge  but  with  extreme¬ 
ly  attractive  performance  guaran¬ 
tees.  Best  of  all,  our  services  are 


designed  to  grow  with  you  and 
offer  you  the  benefits  of  leading 
technologies — without  the  risk  of 
obsolescence. 

We  invite  you  to  learn  more  about 
virtualized  outsourcing  because  we 
are  convinced  it  is  a  concept  that 
will  remake  the  IT  landscape  over 
the  next  few  years.  And  we  think 
once  you  learn  about  virtualized 
outsourcing  you’ll  be  very  interest¬ 
ed  in  what  SAVVIS  has  to  offer. 


Sincerely, 


Rob  McCormick 
Chairman  and  CEO,  SAVVIS 


SPECIAL  ADVERTISING  SUPPLEMENT 


Smart  IT  leaders  explore  their  options  when  it  comes 
to  managing  infrastructure.  These  savvy  leaders  under¬ 
stand  that  the  more  they  know,  the  better  they  can  man¬ 
age,  and  doing  their  homework  on  virtualized  utility 
services  can  yield  a  significant  business  payback. 

“The  advantages  of  virtualized  services  to  the  IT  exec¬ 
utive  are  many,”  says  Rob  McCormick,  chairman  and 
chief  executive  officer  of  SAVVIS  Communications,  a 
supplier  of  virtualized  utility  services.  “They  include  high¬ 
er  availability,  lower  costs  and  the  freedom  to  focus  atten¬ 
tion  on  strategic  opportunities.”  For  business  executives, 
he  adds,  “Virtualized  services  enhance  security  and 
increase  operational  flexibility.” 

“When  we  look  at  the  pricing  differential  between 
separate  machines  or  appliances  and  a  utility  services 
platform,  there  is  a  savings  of  up  to  55  percent,”  notes 
McCormick. 

Beyond  the  baseline  benefits  and  rewards,  here  are 
the  five  key  points  every  CIO  must  know  about  leveraging 
a  virtualized  infrastructure: 


1.  Virtualized  Utility  Services  Are  Here  Now. 

Virtualized  utility  services  are  not  a  thing  of  the  future — 
leading  companies  are  doing  it  now.  A  recent 
SAVVI S/IDG  Research  survey  (see  box  at  right)  shows 
that  IT  executives  are  now  at  a  “tipping  point,”  ready  to 
embrace  the  virtualized  utility  model. 

Already,  most  CIOs  indicate  that  the  strengths  of  the 
virtualized  services  model  coincide  with  their  most  press¬ 
ing  problems.  Some  20  percent  of  these  executives  con¬ 
sider  virtualized  utilities  a  viable  option  for  at  least  some 
part  of  their  infrastructure  today.  More  important,  more 
than  half  of  these  leaders  expect  to  us*3  a  utility  provider 
within  12  months  to  handle  either  security,  servers,  stor¬ 
age  or  network  services. 

For  these  companies,  virtualized  utility  services  will 
help  serve  end  users  seamlessly  and  efficiently  while 
reducing  overall  operational  costs.  They’re  planning  on  a 
future  of  streamlined  operations,  guaranteed  reliability 
and  security,  and  better  managed  costs. 


2.  There’s  A  Difference  Between  Necessary 
And  Strategic  Infrastructure. 

It’s  time  to  solve  the  infrastructure  paradox.  Although 
enterprise  infrastructure  is  frequently  described  as  a  busi¬ 
ness  enabler  that  is  mission-critical,  the  truth  is  that  too 
often  it  is  neither.  Instead  of  providing  a  strategic  advan¬ 
tage,  infrastructure  is  frequently  just  an  expensive  method 
of  delivering  generic  functionality — a  capacity  that’s  practi- 


Survey  Reveals  IT  Problem  Areas 
and  Virtualization  Opportunity 

We  asked  the  questions,  and  you  answered.  SAVVIS 
and  IDG  Research  recently  queried  IT  executives 
about  key  metrics,  such  as  infrastructure  availability, 
spending  plans  and  future  goals.  The  survey  took  a 
particularly  close  look  at  how  budgets  are  divided  up 
and  how  ready  executives  are  to  consider  virtualized 
services  provided  on  a  utility  basis. 

Regarding  infrastructure  today,  the  survey 
found: 

•  70%  of  IT  resources  are  spent  on 
maintaining  existing  systems 

•  Average  utilization  for  mainframe  and 
Unix/Linux  servers  is  50%  or  less 

•  Utilization  of  enterprise  storage  is 
approximately  60% 

•  Downtime  is  a  serious  problem  across 
many  IT  components 

In  planning  for  or  considering  virtualization, 
executives  said: 

•  Over  50%  believe  utility  solutions  will  be  viable  for 
their  business  within  the  next  12  months 

•  They  are  looking  for  flexible  payment  models  such 
as  On-Demand,  Flat  Rate,  and  Usage 


cally  indistinguishable  from  organization  to  organization. 

According  to  AMR  Research,  which  in  a  recent  report 
recommended  that  companies  consider  outsourcing  all  but 
their  most  strategically  important  processes,  the  problem 
is  that  organizations  often  fail  to  set  appropriate  priorities. 
“Just  because  tasks  are  compulsory  or  necessary  for  sur¬ 
vival,  it  doesn’t  mean  that  they  offer  competitive  advan¬ 
tage,”  writes  AMR  analyst  Lance  Travis. 

Moreover,  traditional  IT  models  exacerbate  the  prob¬ 
lem  by  forcing  businesses  to  continue  pushing  IT  invest¬ 
ments  into  the  wrong  basket — expensive  infrastructure — 
instead  of  into  innovative,  strategic  applications  that  can 
provide  differentiation  and  add  value. 

To  provide  the  greatest  benefits  to  the  companies  they 
support,  IT  organizations  must  focus  on  developing  and 
implementing  applications  that  can  provide  a  strategic 
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advantage.  It  is  no  longer  enough  to  have  a  good  ERP 
installation  or  a  smoothly  functioning  billing  system.  Users 
need  and  expect  more.  They  want  leading-edge  capabilities 
that  enable  new  kinds  of  business  processes  and  services  or 
reach  new  customers  in  a  better  way. 

3.  You  Must  Target  The  Right  IT  Investments. 

Misspending  of  money  is  endemic  in  IT.  According  to  the 
SAWI S/IDG  study,  more  than  half  of  IT  budget  spending 
is  allocated  to  staff  and  maintenance  and  support,  while 
spending  on  applications  was  only  about  12  percent. 


to  outsource  a  large  cross-section  of  IT  functions.  In  the 
aforementioned  AMR  Research  report,  Travis  concluded 
that  large-scale  outsourcing,  pursued  aggressively,  can 
yield  IT  budget  savings  of  more  than  40  percent.  Indeed, 
Travis  estimates  that  in  most  cases,  85  percent  of  IT  per¬ 
sonnel  can  be  outsourced,  along  with  two-thirds  of  the 
nonstrategic  enterprise  software — and  the  hardware  that 
supports  it.  With  such  numbers,  ifs  hardly  surprising  that 
the  report  finds  that  while  only  about  20  percent  of  IT 
organizations  are  currently  outsourcing,  more  than  half 
will  begin  doing  so  over  the  next  few  years. 

Even  with  its  many  advantages,  traditional  outsourcing 
often  falls  short.  For  example,  traditional  outsourcing  typi- 


“In  short,  the  virtualized  utility  model  is  the  new 
gold  standard  for  those  leaders  seeking  to  break 

out  of  the  budget  cycle  trap.” 

—Rob  McCormick ,  CEO ,  SAVVIS 


“Organizations  need  to  understand  that  spending  on  IT 
infrastructure  rarely  provides  a  healthy  return  on  invest¬ 
ment,”  says  Ted  Chamberlin,  principal  analyst  at  Gartner 
Group.  “Prior  to  embarking  on  capital  investments  in  IT 
infrastructure,  organizations  should  look  at  several  out¬ 
sourcing  options,  especially  emerging  utility-based  out¬ 
sourcing  models.”  Shifting  investments  away  from  basic 
infrastructure  and  into  critical  applications  can  create  a 
more  flexible  organization  that  is  better  positioned  strategi¬ 
cally.  And,  from  an  upper  management  perspective,  this 
also  has  the  advantage  of  minimizing  capital  expenditures. 

The  problem  with  a  go-it-alone,  do-it-yourself  approach 
to  infrastructure  is  that  it  requires  a  broad  and  continuous 
investment  in  expertise  (people),  technology  and  facilities. 
Of  course,  this  is  not  only  expensive,  it’s  risky.  People 
leave,  technology  quickly  grows  obsolete,  and  facilities 
often  occupy  valuable  space  in  areas  that  could  be  better 
used  for  other  functions. 

4.  Virtualized  Utility  Services  Exceed  The  Benefits 
Of  Ordinary  Outsourcing. 

Information  technology  is  going  through  a  transition  today 
with  the  maturation  of  outsourcing  and  the  emergence  of 
the  virtualized  utility  model.  For  starters,  most  companies 
recognize  that  it  is  not  only  possible,  but  in  fact  desirable 


cally  re-creates  the  client’s  infrastructure  in  the  out¬ 
sourcer’s  data  center,  producing  operational  savings  of  10 
to  15  percent.  However,  since  specific  capacity  is  usually 
maintained  for  the  use  of  each  of  the  outsourcer’s  cus¬ 
tomers,  economies  of  scale  aren’t  fully  realized — utilization 
stays  low  while  costs  stay  high  to  cover  capital  expendi¬ 
tures,  staff  and  maintenance.  What’s  more,  outsourcing 
contracts  generally  require  that  you  estimate  your  needs 
well  into  the  future.  If  you  guess  high  or  guess  low,  you 
lose.  Worse  still,  unless  you  are  able  to  offer  an  outsourcer 
a  giant  long-term  contract,  the  odds  are  that  you  aren’t 
going  to  get  the  kind  of  attention,  flexibility  and  service 
you  want. 

By  contrast,  the  virtualized  utility  model  takes  the  tradi¬ 
tional  model  of  outsourcing  much  further.  The  client 
receives  truly  disruptive  economics  through  the  combina¬ 
tion  of  operational  savings  and  fully  utilized  servers,  storage 
devices,  appliances,  and  networks.  The  IT  operation  runs 
better  due  to  the  expertise  and  systems  of  the  outsourcer; 
more  cost-effectively  because  the  client  pays  only  for  the 
services  they  use;  and  with  improved  reliability  due  to  the 
high  availability  design  of  the  virtualized  infrastructure. 

Confusingly,  the  virtualization  buzz  is  sometimes 
applied  to  in-house  efforts  to  manage  IT — a  sort  of  “next 
step”  beyond  server  consolidation.  Thus,  some  organiza¬ 
tions  are  trying  to  virtualize  themselves.  But  such  home- 
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grown  virtualization  efforts  still  require  heavy  and  continu¬ 
al  investments  in  hardware,  software  and  people.  The  fact 
is,  virtualization  works  best  when  it  is  applied  over  the 
largest  possible  base — sharing  really  does  benefit  everyone. 
Virtualized  services  delivered  via  a  utility  model  offers  on- 
demand  services,  extremely  high  reliability,  and  reduced  or 
eliminated  capital  expense. 

5.  Swift  Adoption  Can  Yield  Immediate 
Business  Benefits. 

Are  infrastructure  virtualization  and  the  utility  model 
really  the  next  wave  in  IT?  Yes.  For  example,  VPNs — vir¬ 
tualized  private  networks  that  provide  secured  “slices”  of 
a  common  network  backbone— have  proven  their  value 
and  are  being  widely  adopted.  And  virtualization  is  being 
adopted  around  the  world.  A  recent  I  DC  study,  “Western 
Europe  IP  VPN  Forecast,  2002-2007”  (February  2004), 
revealed  that  spending  on  managed  IP  VPN  services  in 
Western  Europe  grew  by  107  percent  in  2003.  I  DC 
expects  double-digit  growth  for  the  next  three  years. 

“IP  VPNs  have  taken  the  managed-data  market  by 
storm,”  notes  James  Eibisch,  I  DC’s  research  director  for 
EMEA  IP  and  Hosting  Services.  Talcing  a  cue  from  VPNs, 
servers,  storage  and  appliances  are  now  being  virtualized,  too. 

According  to  I  DC,  the  market  for  utility-based  virtu¬ 
alized  services  is  growing  rapidly  and  will  increase  from 
$800  million  in  2003  to  $3.6  billion  in  2007.  One  rea¬ 
son  for  this  growth  is  that  virtualized  services  deliver  a 
rapid  payback  on  new  investments  while  protecting  pre¬ 
vious  ones.  Virtualized  services  complement  and 
enhance  existing  hardware  and  network  infrastructure 
without  forcing  companies  to  make  additional  capital 
expenditures. 

The  SAVVIS  Advantage 

In  short,  the  virtualized  utility  model  is  the  new  gold  stan¬ 
dard  for  those  leaders  seeking  to  break  out  of  the  budget 
cycle  trap.  It  combines  the  advantages  of  traditional  out¬ 
sourcing  (improved  operations  and  reduced  capital  expen¬ 
ditures)  with  the  disruptive  economics,  five  9’s  availability 
and  massive  scalability  of  virtualization. 

IT  executives  know  that  the  days  of  “big  bang”  IT  pur¬ 
chases  and  double-digit  budget  increases  are  over  and  will 
not  return.  But  the  need  for  IT  to  expand  its  capabilities 
has  never  been  greater.  The  virtualized  utility  model  can 
reduce  costs  while  improving  availability,  flexibility /agility 
and  security.  Virtualized  IT  services  can  provide  the  high¬ 
est  level  of  uptime  and  utilization  while  also  offering 
dynamic  provisioning  (the  ability  to  adjust  features  and 


services  to  meet  rapidly  changing  needs). 

Leveraging  more  than  10  years  of  custom  development 
and  a  heritage  of  exceptional  network  performance, 

SAVVIS  now  offers  a  new  platform  that  eliminates  expen¬ 
sive  hardware  and  gives  companies  a  secure,  private  and 
completely  “virtual”  compute,  storage  and  network  infra¬ 
structure.  This  capability  cuts  internal  IT  costs  by  as  much 
as  50  percent  and  offers  an  integrated  set  of  previously 
unavailable  services. 

Unlike  other  service  providers  built  around  commodi¬ 
ty,  out-of-the-box  technology,  SAVVIS  has  invested  in  the 
creation  of  its  own  proprietary,  automated  management 
and  control  systems  that  allow  it  to  integrate  multiple  plat¬ 
forms  into  an  end-to-end  IT  resource  pool  from  which  cus¬ 
tom  solutions  can  be  dynamically  configured,  provisioned 
and  implemented.  The  software  that  is  the  basis  for  this 
system  is  the  result  of  more  than  a  decade  of  continual 
development  and  refinement. 

Additionally,  SAVVIS  has  partnered  with  leading-edge 
technology  providers  Egenera,  Inkra  Networks,  3 PAR  and 
Nortel  Networks  to  build  the  virtualized  services  delivery 
platform  as  an  end-to-end  solution  that  offers  companies 
the  most  complete  set  of  managed  services  available. 

“With  a  totally  virtualized  services-delivery  platform, 
SAVVIS  is  at  the  forefront  of  true  real-world  utility  com¬ 
puting  for  the  enterprise,”  says  Vern  Brownell,  Egenera’s 
founder  and  chief  technology  officer. 

SAVVIS  is  the  first  company  to  integrate  networking, 
hosting,  servers  and  storage  into  one  virtualized  services 
platform.  Other  providers  offer  combinations  of  these  serv¬ 
ices,  but  not  all  four  together.  SAVVIS’  recent  acquisition 
of  the  assets  of  Cable  &  Wireless  America  gives  the  compa¬ 
ny  a  total  of  over  7,000  customers,  including  many  of  the 
Fortune  500,  24  data  centers,  a  Tier  1  IP  network  and  a 
global  business  that  covers  45  countries 

“SAVVIS’  virtualized  services  delivery  platform  pro¬ 
vides  superior  IT  infrastructure  performance  that  reduces 
internal  IT  costs  by  as  much  as  50  percent,”  says  SAVVIS’ 
McCormick.  “It  lets  businesses  make  better  use  of  their 
internal  IT  resources,  shifting  the  focus  to  building  appli¬ 
cations  that  deliver  competitive  advantage,  not  maintaining 
IT  infrastructure." 

The  complete  SAVVI S/IDG  Research  study  is  available  for 
downloading  at  www.sawis.net/virtualization 
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You  need  information  and  you  need  it  now. 

Don’t  waste  your  valuable  time  searching  high  and  low.  When  you  need  to  get 
your  to-do  list  done,  come  to  the  one  site  that  has  it  all.  From  strategies 
and  roles  to  technologies  and  tools,  the  CIO  Store 
offers  the  best  collection  of  research,  reports  and 
expert  advice  anywhere.  You  can  depend  on  the 
full  range  of  resources  offered  at  the  CIO  Store. 
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Off  the  Shelf 


Edited  by  Carol  Zarrow 


Summer  Break 

Although  not  “business  books,”  these  six  titles  (all  recommended  by  CXO  Media  staff) 
take  on  issues  important  to  business  readers— conscience,  corruption,  leadership,  organi¬ 
zational  politics,  power  and  the  nature  of  success— and  are  offered  as  an  opportunity  to 
diversify  your  summer  reading  list. 
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To  Kill  a  Mockingbird 

By  Harper  Lee 


Scout  Finch  narrates  this 
unflinchingly  candid  story  of 
growing  up  during  the  Depres¬ 
sion  in  the  deep  South.  She  whiles  away  the 
summers  playing  games  with  her  older 
brother  and  their  friend,  plotting  with  them 
ways  to  make  a  reclusive  neighbor,  Boo 
Radley  (the  bogeyman-designate  of  the 
town's  children),  "come  out.”  Then  her 
attorney  father  takes  on  the  defense  of  a 
black  man  charged  with  raping  a  white 
woman.  When  the  fallout  from  the  trial 
intersects  with  the  ongoing  saga  of  Boo 
Radley,  Scout  and  the  reader  learn  a  lesson 
about  the  dehumanizing  effects  of  prejudice 
(of  all  kinds)  as  well  as  the  need  to  stand  up 
for  justice— even  at  great  personal  risk. 


Making  the  Mummies  Dance: 

Inside  the  Metropolitan  Museum  of  Art 


By  Thomas  Hoving 
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An  aging,  elitist  organization  hires  a  brash, 
thirtysomething  hotshot  to  turn  things  around. 

During  the  next  10  years,  he  makes  the  moribund  institution 
over  into  a  bottom-line-  and  growth-oriented  business 
enterprise  with  an  expanded  customer  base.  Then  his  board 
shows  him  the  door.  In  this  tell-all  memoir,  he  reveals  what  it 
took  to  accomplish  the  transformation,  and  it’s  not  a  pretty 
picture.  The  infighting  and  backbiting  he  describes  will 
probably  be  all  too  familiar  to  readers,  even  though  the 
organization  that  this  amusing  and  erudite  book  exposes 
isn’t  a  corporation  at  all,  but  the  Metropolitan  Museum  of  Art. 


The  Killer  Angels 

By  Michael  Shaara 

In  the  green  pastures  of  rural  Pennsylvania 
near  Gettysburg,  50,000  soldiers  were  killed 
in  a  bloody  three-day  encounter  that  has 
since  achieved  mythic  status  in  American  history. 
Among  the  many  vignettes  of  leadership  in  this 
absorbing  chronicle,  one  of  the  most  inspiring  is  the 
story  of  Col.  Joshua  Chamberlain— an  academic  with 
no  military  training  whose  innate  courage  and 
strategic  abilities  were  tested  and  proven  in  action, 
as  his  20th  Maine  infantry  regiment  held  the 
Union's  left  flank  at  a  tipping  point  of  the  battle. 
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Undaunted 
Courage: 

Meriwether  Lewis, 

Thomas  Jefferson,  and 
the  Opening  of  the 
American  West 

By  Stephen  Ambrose 

The  Lewis  and  Clark  Expedition  was 
sent  by  President  Jefferson  to  explore 
the  mostly  unknown  territory  the 
United  States  had  purchased  from 
France  in  an  1802  treaty  that  overnight 
doubled  the  young  country’s  land 
area.  Undaunted  Courage  is  the 
chronicle  of  that  adventure,  but  it’s 
also  the  sadder  story  of  expedition 
leader  Meriwether  Lewis,  who,  haunted 
by  what  he  saw  as  the  expedition’s 
failure  to  accomplish  many  of  its 
original  objectives,  died  (possibly 
by  his  own  hand)  three  years  after 
returning  to  the  East.  With  the 
perspective  of  200  years,  modern 
readers  will  see  that  Lewis’s  return 
home  safely  with  all  but  one  of  his 
Corps  of  Discovery  was  in  itself  a 
victory  over  the  odds  and  a  triumph 
of  personal  leadership,  but  “success" 
is  often  more  accurately  assessed 
over  the  longterm. 


The  Power  Broker:  Robert  Moses  and  the  Fall  of  New  York 

By  Robert  A.  Caro 

A  public  works  czar  for  more  than  40  years,  he  created  New  York’s  parks  and  beaches,  public 
housing,  highways  and  bridges.  Was  this  master  builder  a  Roosevelt,  a  Rockefeller,  a 
La  Guardia,  a  Lindsay?  No.  The  single  most  powerful  person  ever  to  hold  sway  in  New  York  (both  city 
and  state)  was  a  private  citizen,  Robert  Moses.  Through  the  sheer  force  of  his  personality  and  will— and 
without  ever  being  elected— he  commanded  the  workings  of  every  municipal  institution,  public  and 
private.  This  cautionary  tale  reveals  how,  as  Moses  accumulated  power,  power  eventually  became  an 
end  in  itself.  For  better  or  worse,  present-day  New  York  City  is  in  many  ways  a  monument  to  this  one 
man’s  unchecked  megalomania. 


All  the  King’s  Men 

By  Robert  Penn  Warren 

Governor  Willie  Stark  (who  is 
loosely  modeled  on  Depression- 
era  Louisiana  governor  Huey 
Long)  began  his  political  career  as  a 
reform-minded  backcountry  lawyer  but 
acquired  a  taste  for  power  and  aban¬ 
doned  his  original  ideals.  His  aide  and 
hatchet  man,  Jack  Burden— whose  sole 
job  is  to  dig  up  dirt  on  anyone  who  stands 
in  the  way  of  the  governor’s  ambitions— 
narrates  this  complex  and  beautifully 
imagined  morality  tale  of  a  leader  whose 
corruption  is  his  undoing. 


4  2 


JULY  1,  2004 


www.cio.com 


COMPANIES  THAT 
THOUGHT  THEY 
COULDN’T  AFFORD  SAP 
RUN  SAP 


§pp  £§. 

Sal  jijtjK  V-i-vt 

1 

Vm  ¥ m  mS.: ) 

jbv  •- jP*"  _  JK$.' 

kU 

fiK 

||1|| 

•  V  /:|  i  l 

_  ■W 

ji  J 

W 

/;■'  a1' 

-  l|> 

Mm 

^ '  •  MJt 

^  ■  B 

.  ! k  1 T 

You  don’t  have  to  be  big  to  think  big.  Or  to  run  SAP'  With  a  variety  of  solutions  for  small  and  midsize  businesses, 
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Three  Questions  with 
NPR’s  Robert  Holstein 


BEFORE  HE  JOINED  National  Public  Radio,  Robert  Holstein  was  a  self- 
described  “NPR  junkie.”  The  radio  network  chose  Holstein,  a  23-year  IT 
veteran  who  formerly  worked  as  a  Capital  One  Financial  business  infor¬ 
mation  officer,  to  be  its  first-ever  CIO  in  January.  CIO  recently  spoke  with 
Holstein  to  get  the  scoop  on  who  his  favorite  NPR  voice  is,  and  the  IT 
involved  in  radio  broadcasting  and  production  around  the  world. 


CIO:  Who’s  your  favorite 
NPR  personality? 

Robert  Holstein:  Will  Shortz,  the  puzzle  mas¬ 
ter.  He’s  on  Weekend  Edition  on  Sundays. 

I  also  like  Don  Gonyea,  our  White  House 
reporter,  a  lot.  I  had  the  opportunity  to 
visit  his  setup  in  the  press  room  at  the 
White  House  and  learn  a  little  bit  about 
his  job.  Following  the  president  carrying 
all  that  technology  is  a  challenge  for  him, 
so  it  was  an  important  experience  for  me 
in  learning  about  his  IT  needs. 


When  a  listener  hears  Linda 
Gradstein  reporting  from 
Jerusalem,  how  does  IT  enable  the 
recording,  producing,  transmitting 
and  broadcasting  of  her  reports? 

There’s  not  one  good  answer  to  that  ques¬ 
tion  because  a  lot  depends  on  the  type  of 
report,  where  the  reporter  is  and  what 
equipment  they’re  using.  But  in  the  case  of 
filing  a  report  where  Linda  blends  various 
audio  components  together  into  a  mosaic 
of  sound,  she  makes  her  recording  of  the 


components  of  the  report  with  a  recording 
device,  which  could  be  a  minidisk  player,  a 
solid  state  recording  device  or  digital  audio 
tape.  Then  she  downloads  this  recording 
onto  her  PC  where  she  uses  software  to 
edit  the  audio  the  way  she  wants  the  pieces 
to  sound.  Then  she  sends  her  product  back 
to  producers  in  Washington  via  e-mail  and 
we  FTP  those  files  back  to  a  central  con¬ 
trol  where  it  gets  post-produced. 

What  are  the  technical  challenges 
associated  with  supporting  reporters 
in  remote  places  around  the  world? 

The  big  issues  have  to  do  with  support. 

We  have  people  working  in  different  time 
zones,  which  means  I  need  to  have  cover¬ 
age  24/7.  If  someone  has  a  problem  with  a 
PC,  we  need  to  provide  a  replacement  or 
a  remote  support  arrangement  so  they  can 
get  a  diagnosis.  One  other  challenge  is  dis¬ 
tributing  multimegabit-sized  software 
upgrades  to  people  in  the  field  and  on  the 
end  of  a  satellite  phone  who  lack  fast 
Internet  connections. 

-Meridith  Levinson 


CRIMINAL  JUSTICE 

Former  CIO  Sentenced  in 
HealthSouth  Fraud 


THE  FORMER  CIO  OF  HEALTHSOUTH,  Kenneth  K.  Livesay,  was  sentenced  to  six 
months  of  home  detention  for  his  role  in  falsifying  financial  information  that  the 
health-care  company  filed  with  the  Securities  and  Exchange  Commission. 

Livesay  will  also  have  to  serve  five  years’  probation,  pay  a  $10,000  fine  and 
forfeit  $750,000  from  his  gains  at  HealthSouth.  He  had  pleaded  guilty  in  April 
2003  to  three  counts  of  conspiracy  to  commit  wire  fraud  and  securities  fraud,  and 
to  falsifying  quarterly  and  annual  financial  statements  with  the  SEC. 

Livesay,  43,  of  Birmingham,  Ala.,  joined  HealthSouth  in  1989  and  was  assis¬ 
tant  controller  until  1999  when  he  was  promoted  to  CIO.  His  lawyer  says  he  took 
the  CIO  job  to  avoid  continuing  his  participation  in  the  company’s  fraudulent 
activities,  according  to  The  Wall  Street  Journal. 

Federal  prosecutors  had  sought  a  five-year  jail  term  for  Livesay,  and  may  still 
appeal  the  sentence  he  received.  U.S.  District  Judge  U.W.  Clemon  says  Livesay 
merited  home  detention  for  his  cooperation  with  government  prosecutors. 

Livesay  was  sentenced  the  same  week  as  former  CFO  Malcolm  “Tadd”  McVay, 
who  also  received  a  home  detention  and  probation  sentence  for  his  role  in  the 
HealthSouth  scandal. 

A  forensic  accounting  review  showed  HealthSouth’s  fraud  totaled  between 
$3.8  billion  and  $4.6  billion,  the  company  said  in  a  June  1  statement. 


This  Date  in 

IT  History 


Jury  Indicts 
Creator  of  First 
Internet  Worm 

July  26, 1989 

A  grand  jury  in  Syracuse,  N.Y.,  indicts 
a  24-year-old  Cornell  University  graduate  student  for 
creating  a  computer  virus  that  cripples  the  precursor 
of  today’s  Internet. 

Robert  Tappan  Morris  Jr.  is  the  first  person  prosecuted 
under  the  Computer  Fraud  and  Abuse  Act  of  1986,  for 
deploying  a  virus  that  shut  down  6,000  computers 
connected  by  networks  at  universities,  research  centers 
and  military  installations,  The  New  York  Times  notes. 
The  Times  reports  that  according  to  two  of  Morris’s 
college  friends,  the  virus  “multiplied  wildly  out  of  control” 
because  of  a  programming  error. 

He  is  later  fined  $10,000  and  sentenced  to  three-years’ 
probation  and  community  service. 
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A  LONG  WAY. 


While  the  title  of  CIO  may  not  have  existed  65  years 
ago,  that’s  how  long  Fujitsu  has  been  developing 
innovative  technology  solutions  for  the  world’s 
leading  companies. 

Today,  we're  leveraging  our  multi-billion  dollar 
annual  R&D  budget  to  give  CIOs  the  powerful  new 
enterprise  solutions  they  need  to  automate  even 
the  most  complex  business  infrastructures.  Our 
customers  and  business  units  work  closely  with  our 
research  teams  to  guide  new  product  development. 
This  teamwork  ensures  our  discoveries  make  it  out  of 
the  lab  and  into  the  enterprise. 

Of  course,  there's  a  lot  more  to  a  $45-billion 
company  than  just  R&D.  Our  high-performance  mobile 
computers,  scalable/reliable  servers,  and  managed  and 
professional  services  also  give  CIOs  all  the  tools  they 
need  for  a  world-class  IT  partnership.  For  details  go  to 
us.fujitsu.com/computers  or  call  I  -800-83 1  -3 1 83. 
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COMPANIES  THAT  PUT  VOICE  ON  THE 
NETWORK  CHOOSE  THE  COMPANY 
THAT  BUILT  THE  NETWORK. 

When  voice  joins  data  on  a  secure  network,  some  remarkable  things  can  happen.  Instead  of  managing  different  flavors  of  PBX 
from  location  to  location,  you  can  handle  everything  from  one  place,  saving  time  and  money — not  to  mention  mileage  on  IT  staff 
shoes.  And  with  over  20  years  of  proven  networking  experience,  Cisco  has  become  the  standard  for  millions  of  voice  IP  users 
around  the  world.  It's  why  over  half  of  the  Global  500  have  chosen  Cisco  to  rethink  the  way  they  handle  voice.  And  their  business. 
Are  you  in  yet?  To  learn  how  Cisco  can  help  you  plan,  design  and  implement  an  end-to-end  IP  solution,  visit  cisco.com/go/ipcnow. 
NOW,  OVER  THREE  MILLION  PEOPLE  ARE  USING  CISCO  IP  PHONES. 
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It’s  a  Jungle 
Out  There 

Mastering  corporate  politics  is  even  harder  than  riding 
a  bike  through  the  jungles  of  Singapore,  learned  a 
former  Washington  Group  CIO— who’s  done  both 

BY  BRIAN  BERTLIN 

I  USED  TO  BE  vice  president  and  chief  information  officer  for  engineer¬ 
ing  and  construction  company  Washington  Group  Interna¬ 
tional.  But  last  August,  the  company  told  me  it  had  decided  to 
eliminate  the  CIO  position  and  outsource  IT  infrastructure 
operations  to  Perot  Systems.  While  the  news  did  upset  me  at 
first,  this  decision  has  ultimately  become  a  pearl  in  an  oyster  for 
me.  You  see,  just  prior  to  this  event,  my  wife  had  been  offered 
a  fabulous  position  in  Singapore,  and  we  were  in  the  midst  of 
deciding  how  to  handle  that  fortuitous  event. 

Before  I  tell  you  my  story  and  what  I  learned,  let  me  tell 
you  how  I  got  to  be  where  I  was.  At  Washington  Group,  I 
worked  my  way  up  from  group  director  to  corporate  director, 
ultimately  becoming  the  first  CIO  in  the  history  of  the  company. 
At  the  time  I  became  CIO  in  2000,  IT  was  a  mess.  Each  busi¬ 
ness  unit  had  its  own  IT,  from  applications  to  standards  to 
people.  The  Hackett  Group  did  a  study  of  Washington  Group 
and  found  287  different  financial  systems  in  existence.  Addi¬ 
tionally,  we  had  every  make  and  model  of  e-mail,  PC,  network 
equipment,  servers  and  so  on.  It  was  up  to  the  corporate  IT 
group  to  pull  all  these  disparate  systems  and  data  together  to 
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create  the  “company  view.”  I  took  on  the  additional  challenge 
of  changing  an  organization  that  was  focused  on  the  latest 
technology  to  one  that  would  be  focused  on  operational  excel¬ 
lence  and  service  delivery.  I  still  remember  a  good  business 
associate  of  mine  telling  me  that  he  didn’t  know  whether  to 
congratulate  or  console  me. 

It  was  an  exciting  time  at  the  company.  We  had  just  com¬ 
pleted  a  $600  million  acquisition  of  Westinghouse  Government 
Services,  and  we  were  starting  due  diligence  on  a  $2.8  billion 
acquisition  of  Raytheon’s  engineering  and  construction  busi¬ 
ness  that  would  more  than  double  the  size  of  the  company. 
My  boss,  the  new  CFO,  brought  a  very  progressive  leadership 
style  to  Washington  Group.  We  made  great  progress  during 
this  time;  about  half  the  company  was  installed  on  one  ERP 
system,  and  we  reengineered  many  core  financial  processes. 
(One  result:  The  monthly  financial  closing  cycle  was  reduced 
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We  get  IT.  We  speak  IT.  We  know  IT 


Your  IT  budget  has  been  approved.  It's  time  to  hire  -  but  where  do  you 
turn  to  find  the  right  fit?  At  Robert  Half  Technology,  we  really  understand 
IT.  Our  unsurpassed  knowledge  of  the  technology  marketplace  allows  us 
access  to  the  very  best  and  brightest  in  the  industry.  And  well  meet 
your  requirements  quickly  and  cost-effectively.  So  whether  you're  look¬ 
ing  for  someone  to  help  manage  your  Q  &  A  in  application  rollouts, 
upgrade  your  operating  system,  or  even  secure  systems  that  prevent 
viruses  -  relax.  Talk  to  us  today.  You'll  get  the  right  person  for  the  job. 
Guaranteed* 
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from  28  days  to  seven.)  We  also  installed  a  new  enterprise  data 
center  and  a  single  e-mail  system  for  13,000  users,  and  con¬ 
solidated  the  independent  IT  organizations  into  operations  and 
applications  groups.  In  addition,  we  implemented  a  new  proj¬ 
ect  management  program  and  launched  a  new  network  to  con¬ 
nect  more  than  120  locations. 

Unfortunately,  the  Raytheon  acquisition  ultimately  led  the 
company  into  Chapter  1 1  bankruptcy  protection.  This  was  the 
second  bankruptcy  for  the  company  in  five  years.  My  boss  left 
the  company  in  2000  and  was  replaced  a  few  months  later 
with  an  old-school  CFO.  He  was  tremendous  at  managing  the 
numbers  but  had  an  extremely  limited  knowledge  of  technol¬ 


ogy.  I  was  never  able  to  build  the  same  great  working  rela¬ 
tionship  with  him  as  I  did  with  his  predecessor.  I  respected  the 
fact  that  he  was  focused  on  the  Chapter  1 1  process,  but  as  a 
result  he  had  little  time  for  me.  In  an  effort  to  accelerate  build¬ 
ing  a  better  working  relationship,  he  recommended  bringing  in 
the  retired  CIO  from  his  previous  job  to  consult  with  me. 
Sounded  like  a  good  idea  at  the  time.  He  was  a  very  senior 
guy,  very  good  at  running  IT,  especially  relating  to  senior  man¬ 
agement — as  he  called  it  “the  care  and  feeding  of  vice  presi¬ 
dents.”  I  included  him  in  meetings  with  the  internal  IT 
leadership  team  and  gave  him  access  to  information  about  the 
IT  organization  operation  (financials,  strategy  and  so  on). 

I  have  since  learned  this  consultant  was  part  of  the  team 
that  negotiated  (behind  my  back)  with  Perot  Systems.  I’ll  be 
considerably  more  inquisitive  and  cautious  of  consultants  next 
time!  I  also  now  see  that  it  is  my  responsibility  to  manage  the 
quality  of  every  relationship,  especially  with  my  superior.  Next 
time,  I  will  work  harder  to  develop  the  appropriate  working 
relationship  that  achieves  not  only  my  goals  but  also  satisfies 
my  boss’s. 

Ye  Olde  End  Run 

The  company  made  a  progressive  move  by  consolidating  a 
number  of  frontline  departments — including  procurement,  proj¬ 
ect  controls  and  engineering — into  a  shared  services  approach 
under  one  organization  known  as  the  operations  center.  IT 
finally  had  clear  business  owners  for  groups  of  applications 
that  up  until  now  had  been  ineffectively  managed  by  commit¬ 
tees.  But  the  leader  of  the  operations  center  was  a  crotchety 
legacy  of  the  company  who  never  had  anything  good  to  say 


about  IT.  He  never  failed  to  remind  me  what  a  pain  it  was  to 
have  to  change  his  e-mail  password  regularly.  (I  was  very 
pleased  that  this  was  usually  the  biggest  issue  he  had  to  bring 
to  my  attention.)  To  work  with  this  guy,  I  brought  in  a  direct 
report  from  the  field  projects  to  run  our  applications  organi¬ 
zation  and  work  with  the  operations  center  leader. 

The  guy  I  brought  in  to  lead  the  applications  group  was  very 
ambitious  but  green  in  leadership  skills.  He  jumped  right  in  and 
did  a  great  job  in  the  application  management  area.  The  busi¬ 
ness  owners  of  the  various  application  groups  began  initiatives 
to  create  a  suite  of  applications  from  the  dog’s  lunch  we  started 
with.  However,  this  guy  was  ambitious,  and  he  developed  a 

close  relationship  with  the  opera¬ 
tions  center  leader.  A  number  of 
times  he  also  met  with  my  boss  or 
other  senior  leaders  in  the  com¬ 
pany,  meetings  I  found  out  about 
afterwards.  Without  my  realizing 
it,  a  subtle  power  shift  was  occur¬ 
ring  as  more  of  the  business  leaders 
turned  to  my  direct  report  instead  of  me.  The  key  mistake  I 
made  was  not  developing  and  nurturing  my  own  relationship 
with  the  operations  center  leader.  In  my  attempt  to  develop  the 
leader  of  the  applications  group,  I  let  my  own  significance  erode. 
Next  time,  I’ll  make  sure  I  have  a  strong  relationship  with  the 
decision-makers  in  the  company  and  bring  others  into  the  equa¬ 
tion  as  needed.  But  I  won’t  let  them  do  my  job.  A  key  respon¬ 
sibility  of  any  CIO  is  to  communicate  the  benefits  of  IT  to  the 
leadership  of  the  company.  This  has  to  be  done  regularly  and  in 
the  language  of  the  business.  The  CIO  must  always  be  seen  as 
the  go-to  person  in  IT. 

My  time  in  Singapore  has  given  me  the  chance  to  contem¬ 
plate  the  string  of  events  that  brought  me  here.  I’m  also  in  the 
best  shape  of  my  life  because  of  my  regular  mountain  bike 
rides  through  the  Singapore  jungle.  In  a  funny  kind  of  way, 
riding  in  the  intense  heat  and  humidity,  dodging  snakes,  lizards 
and  other  hazards  strikes  me  as  somewhat  analogous  to  my 
CIO  days.  I  am  already  applying  what  I’ve  learned  about  lead¬ 
ership  and  management  to  my  consulting  gigs  here,  and  I  look 
forward  to  doing  the  same  when  the  next  full-time  opportunity 
comes  along.  In  the  meantime,  the  move  to  Singapore  has  been 
an  extremely  beneficial  experience  for  me,  if  only  because  it 
has  allowed  me  to  step  back  and  figure  out  how  to  turn  the 
mistakes  of  the  past  into  valuable  lessons  for  the  future.  HE3 


Brian  Bertlin  is  the  former  CIO  of  Washington  Group 
International.  When  not  riding  his  mountain  bike,  he 
is  expanding  his  international  IT  experience  through 
management  consulting.  Please  send  your  comments 
to  idbrian@hotmail.com  or  letters@cio.com. 


I  now  see  that  it  is  my  responsibility  to  manage  the 
quality  of  every  relationship,  especially  with  my  superiors 
That’s  not  a  job  you  can  leave  to  anyone  else. 
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For  25  years,  we've  walked  the  line  between  next  and  now  to 
develop  innovative  telephony  and  contact  center  solutions  for 
some  of  the  largest  (and  smallest)  companies  in  North  America. 
Converged  and  pure  IP  telephony  networks  that  are  reliable, 
flexible  and  scalable  -  ideal  for  5  or  500,000  employees. 
Productivity  applications  like  unified  messaging  that  drive 
communication  from  anyone  to  anywhere  at  anytime.  Powerful 
contact  center  solutions  that  provide  the  flexibility  and 
structure  to  turn  a  customer  call  into  a  meaningful  connection. 
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Introducing  the  bizhub  C350. 
It’s  the  hub  of  your  business. 


You  have  important  work  to  do.  And 
now  there’s  an  imaging  solution  that  will 
help  you  and  your  team  do  everything 
better:  the  new  bizhub  C350.  It’s  where 
affordable,  high-quality  color  meets 
black  and  white.  And  you  can  print, 
copy,  scan,  fax,  e-mail  and  more.  From 
a  single  resource  that  also  centralizes 
and  manages  your  documents. 

See  everything  bizhub  can  do. 

Call  1-866-924-9482  to  learn  more 
Or  visit  www.bizhub.biz  right  now. 
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Howard  Rubin  I  Real  Value 

Practical  Counsel  for  Capturing  IT  Value 


Into  the  Light 

Some  IT  processes,  such  as  those  focusing  on 
supporting  customers,  are  difficult  to  quantify 
and  are  therefore  hidden.  But  it  is  possible 
to  bring  such  value  out  of  the  shadows. 

BY  HOWARD  RUBIN 

IT’S  A  VIEW  that  dates  back  to  the  industrial  age — but  CEOs,  business 
executives  and  CIOs  alike  still  perceive  IT  value  primarily  in 
terms  of  a  simple  ROI  measurement.  This  stems  from  basing 
the  value  of  enterprises  on  their  financial  assets — such  things  as 
revenue,  real  estate  or  equipment. 

But  this  is  the  shortsighted  view.  And  it’s  time  for  CIOs  to 
battle  this  misperception.  The  reality  is  that  business  valuation 
changed  a  decade  or  more  ago  in  the  shift  from  an  industrial 
to  an  information  and  service  economy. 

Your  CEO  and  board  are  well  aware  that  it  is  commonplace 
for  the  company  itself  to  be  valued  at  many  times  over  the  value 
of  just  its  financial  and  physical  assets.  There  is  value  in  such 
things  as  a  company’s  trademarks,  business  processes,  customer 
lists,  knowledge,  skills  and  relationships.  But  there  isn’t  any  way 
for  a  business  to  simply  plug  such  value  information  into  an 
ROI  computation  when  building  a  business  case  to  do  some¬ 
thing  new  because  it’s  hard  to  quantify  these  in  financial  terms. 
So,  more  often  than  not,  these  types  of  value  are  not  dealt  with 
directly  and  are  basically  hidden. 

Similarly,  there  are  many  types  of  value  created  by  an  IT 
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organization  that  remain  hidden  and  are  therefore  difficult  to 
quantify.  But  an  effective  CIO  shouldn’t  let  the  opportunity  to 
prove  this  value  fall  by  the  wayside  just  because  it  is  a  chal¬ 
lenge.  For  example,  best-practice  IT  organizations  invest  in 
portfolio  management  processes  and  continuously  review  per¬ 
formance  of  their  application  systems  and  infrastructure  plat¬ 
forms.  This  process  is  used  as  a  mechanism  to  replace,  refresh 
and  retire  systems.  Managing  and  maintaining  this  process 
has  a  cost  that  is  typically  5  percent  to  8  percent  of  the  total 
IT  spending.  That  cost  is  very  visible.  But  the  value  of  the 
process  has  to  do  with  keeping  the  organization  current  and 
keeping  the  applications  running  at  an  optimum  level.  This 
sort  of  approach  is  extremely  valuable  to  the  enterprise,  but  it 
is  also  hard  to  quantify. 

In  addition,  IT  organizations  are  very  focused  on  supporting 
business  processes  and  providing  the  tools  and  platforms  that 
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effectively  enable  an  enterprise  to  share  customer  information 
and  knowledge.  While  such  IT  support  to  a  business  is  essen¬ 
tial,  computing  its  value  in  financial  terms  is  difficult  because  it’s 
a  challenge  to  place  a  dollar  amount  on  the  worth  of  sharing 
information  across  a  business.  It’s  certainly  a  hurdle,  but  not  an 
insurmountable  one. 

Proving  the  hidden  value  of  IT  spending  and  support  takes 
some  effort  and  extra  research  but  it  can  be  done.  If  you  want 
to  tackle  this  problem  and  make  all  the  value  provided  by  IT  to 
the  business  visible  and  “real”  (and  therefore  useful  for  plan¬ 
ning  and  business  case  analysis),  here  are  some  ways  to  accom¬ 
plish  this.  The  first  step  to  bringing  hidden  value  into  the  light 
is  to  break  the  problem  into  pieces. 

Different  Ways  to  Look  at  IT  Value 

There  are  many  ways  to  look  at  IT  value.  The  first  is  the  vis¬ 
ible  one — financial  value.  The  financial  value  of  IT  has  to  do 
with  both  the  cost  and  benefits  sides.  It  can  be  measured  in 
terms  of  how  much  IT  contributes  to  company  profit,  and 
how  much  it  contributes  to  revenue  growth  and  protection. 

The  other  forms  of  value  are  the  hidden  ones  (not  as  obvi¬ 
ous  but  no  less  important):  factors  such  as  customer  value, 
process  value,  people  value  and  port¬ 
folio  management  value. 

Customer  value:  This  form  can  best 
be  shown  by  making  visible  the  size  of 
the  customer  base  that  IT  supports 
both  inside  the  company,  including 
users,  as  well  as  the  true  business  cus¬ 
tomer  base.  Using  metrics  such  as  the 
number  of  internal  customers,  num¬ 
ber  of  external  customers,  and  the 
ratio  of  the  IT  staff  size  to  each  of 
these  illustrates  the  scope  of  the  world 
that  IT  supports.  Best-practice  companies  combine  this  with 
customer  satisfaction  measures  to  put  a  focus  on  how  effec¬ 
tive  their  support  is. 

Process  value:  This  measure  allows  the  business  to  get  a  view 
of  what  is  going  on  inside  the  IT  “plant” — the  MIPS,  desk¬ 
tops,  storage,  servers — and  the  quality  and  maturity  of  IT’s 
own  business  procedures.  This  is  where  external  ratings  and  cer¬ 
tifications  such  as  the  International  Organization  for  Stan¬ 
dardization  and  Capability  Maturity  Model  play  a  role. 

People  value:  This  one  focuses  on  the  IT  staff,  their  expe¬ 
rience  and  performance.  Companies  that  have  done  the  best 
job  of  making  this  critical  resource  visible  provide  measures 
of  basic  demographics,  satisfaction  and  years  of  experience. 

Portfolio  management  value:  This  measurement  is  created 
through  the  activities  an  IT  organization  does  to  renew,  refresh 
and  replace  all  of  its  resources  from  systems  to  people.  This  is  the 


Get  Even  More  Value 


There  are  lots  and  lots  of  ways  to  look  at— and 
communicate— value.  If  you  need  to  find  the 
ways  that  say  it  best  for  your  business,  start 

in  the  IT  Value  Research  Center,  where  we 
list  everything  you  need  from  tools  and  tech¬ 
niques,  such  as  BALANCED  SCORECARD, 
PROJECT  PORTFOLIO  MANAGEMENT  and 

more,  to  what  you  need  to  know  to  get  your 
message  across.  Go  to  www.cio.com/itvalue 

for  the  answers  you  need. 

cio.com 


kind  of  value  that  comes  from  IT  R&D  and  the  use  of  technol¬ 
ogy  to  look  for  new  opportunities  to  get  business  benefit  from 
technology.  It  is  the  kind  of  value  created  by  constantly  looking 

Best-practice  IT  organizations  invest 
in  portfolio  management  processes 
and  continuously  review  performance 
of  their  application  systems  and 
infrastructure  platforms. 

at  business  application  systems  and  optimizing  their  performance, 
removing  obsolete  ones  and  introducing  new  ones.  Measures  in 
this  area  are  often  ignored  but  can  include:  the  ratio  of  IT  train¬ 
ing  expense  to  total  IT  expense;  the  ratio  of  IT  R&D  expense  to 
total  IT  expense;  the  ratio  of  the  number  of  IT  systems  replaced 
or  retired  to  the  total  number  of  IT  systems,  and  the  number  of 
IT-based  patents  or  patent  applications. 

For  your  next  round  of  IT  reports  to  business  management, 
you  should  consider  demonstrating  the 
complete  IT  value  picture  by  using  these 
categories.  It  makes  your  hidden  value 
more  visible — putting  it  side  by  side 
with  financial  performance. 

By  making  a  list  of  these  categories 
and  exploring  them  in  depth,  you  can 
check  off  what  you  have  available 
today,  collect  the  data  and  see  what  it 
shows.  It’s  very  likely  that  your  IT  hid¬ 
den  value  has  not  been  visible  to  IT 
either,  so  this  exercise  is  not  just  about 
ensuring  that  business  understands  the  full  IT  contribution  to 
business  strategy.  But  once  you’ve  made  the  picture  complete  by 
adding  in  all  the  hidden  IT  value,  you’ll  be  in  a  position  to 
communicate  it  and  make  it  evident  to  the  business  leadership. 

With  the  current  emphasis  on  getting  better  business  value 
from  IT  while  keeping  costs  down,  businesses  need  to  under¬ 
stand  the  full  value  picture  of  their  IT  investments  and  plans. 
Express  the  full  value  of  IT — financial,  customer,  process, 
people  and  portfolio — and  you’ll  be  well  on  your  way  to  pro¬ 
viding  the  complete  picture  and  ensuring  that  the  business  side 
understands  everything  IT  contributes  to  the 
enterprise.  HE] 


Howard  Rubin,  an  expert  on  measuring  value,  is  an 
executive  vice  president  of  Meta  Group  and  can  be 
reached  at  howard.rubin@metagroup.com. 
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Agile  IT  organizations  are  those  that  are  ready  to  meet  today’s  business  challenges  with 
flexible  staffing  models  and  sourcing  strategies,  modular  architecture  and  open-ended 
technology,  along  with  nimble  governance  and  project  prioritization  and  management  struc¬ 
tures.  This  year’s  CIO  100  winners  exemplify  leadership  and  innovation  in  the  use  of  technol- 
ogy— giving  their  companies  an  edge  in  an  environment  where  the  only  constants  are  change 
and  uncertainty. 


Uncertain  times  favor  agile  organizations.  Become  one. 


Honing  the  Agile  IT  Organiza¬ 
tion:  Tim  Buckley,  Managing 
Director,  IT,  The  Vanguard 
Group  &  James  Burke,  Vice 
President  of  IT&T,  Greater 
Toronto  Airports  Authority. 
Technological  agility,  flexible 
staffing  structures  and  the  free¬ 
dom  to  allocate  IT  budget  dol¬ 
lars  where  they  are  most 
needed  on  a  month-to-month 
basis  are  the  hallmarks  of  the 
agile  enterprise.  What  are  some 
of  the  practices  and  policies 
you  can  employ  to  engender 
competitive  agility? 


Seeing  and  Seizing  Special 
Opportunities:  Michael  G. 
Williams,  CIO,  The  New  York 
Times  Company.  Every  now 
and  then  someone  has  a  great 
idea  that  could  sell  more  prod¬ 
uct,  enhance  customer  loyalty 
and  burnish  the  organization's 
image.  If  the  idea's  a  real 
stretch,  and  there's  only  a  short 
window  of  opportunity,  you'd 
better  have  a  flexible  infrastruc¬ 
ture  and  a  lot  of  cooperation 
from  several  different  groups  to 
pull  it  off. 

Managing  the  Merger  Process: 
Tom  Shelman,  Senior  Vice 
President  &  CIO,  Northrop 
Grumman  Corporation.  Few 
business  events  are  potentially 


as  complicated  and  fraught 
with  peril  as  a  major  merger  or 
acquisition.  Maintaining  a  long¬ 
term  perspective  and  a  flexible 
viewpoint  helps  the  acquiring 
company  keep  the  best  and 
discard  the  worst— from  the 
best  technologies  and  staff  to 
the  most  effective  and  agile 
business  processes  and  poli¬ 
cies. 

Growing  the  Business  Through 
New  Markets  and  Products: 
Catherine  S.  Brune,  Senior 
Vice  President  &  CTO,  Allstate 
Insurance  Company  &  Tsvi  Gal, 
CIO,  Warner  Music  Group. 

Agile  organizations  are  always 
on  the  lookout  for  ways  to  grow 
the  business,  expanding  into 


new  markets,  offering  new 
products  and  services,  and 
continually  reshaping  offerings 
to  match  new  customer  needs. 

Going  Global— Sourcing  and 
Standards:  Doing  business  in 
an  increasingly  active  global 
neighborhood  poses  a  world  of 
challenges:  from  cultural  and 
logistical  issues  to  broader 
matters  like  sourcing  and 
establishing  global  standards, 
not  just  technology  infrastruc¬ 
ture  standards  but  also  busi¬ 
ness  process  standards. 

Keeping  Close  to  the  Business: 
Anthony  Cicco,  Jr.,  Deputy 
Chief  Administrative  Officer  & 
CIO,  US  General  Accounting 
Office.  Effective  governance 
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Symposium  moderator  Paul  Saffo,  Director  of  the  Institute  for  the  Future,  returns  this  year  to 
propose  more  provocative  scenarios  and  inspire  spirited  discussions.  Saffo  takes  a  look  at  what 
current  trends  not  only  pose  the  most  problems  for  CIOs,  but  also  those  that  could  provide 
great  opportunity. 


t^equant 

FUJITSU 


Michael  Hawley,  Director  of  Special  Projects  at  MIT,  has  accomplished  many  amazing  things 
himself.  Hawley  says,  above  all,  he  is  proudest  of  his  students,  who  have  in  turn  gone  on  to 
accomplish  their  own  amazing  things.  He  shares  insights  on  his  own  style  of  leadership,  inspir¬ 
ing  innovation  and  applying  technology  to  benefit  business  and  humanity. 

If  it  takes  leadership,  innovation  and  agility  to  manage  domestic  or  global  business 
projects— imagine  what  it  takes  to  conceive  of,  implement  and  manage  interplanetary  ones. 
Peter  Theisinger,  originally  Mars  Exploration  Rover  Project  Manager,  and  now  manager  of  the 
2009  Mars  Science  Laboratory  for  NASA's  Jet  Propulsion  Laboratory,  describes  the  challenges 
in  Going  to  Extremes:  Managing  Interplanetary  Projects. 


practices  and  alignment  strate¬ 
gies  ensure  that  the  CIO  main¬ 
tains  a  seat  at  the  executive 
table  and  that  the  IT  depart¬ 
ment  remains  in  step  with  all 
areas  of  the  business. 

Designing  for  Agility— Tech¬ 
nologies  and  Infrastructure: 

Great  ideas  will  go  for  naught 
if  your  organization  lacks  the 
flexibility  in  its  infrastructure 
and  processes  to  be  able  to 
quickly  put  new  plans  into 
action,  expand  into  new  coun¬ 
tries  or  re-tool  or  re-use  appli¬ 
cations. 


Forging  a  Stronger  Supply 
Chain:  Mike  Webb,  CIO,  Flex¬ 
tronics  International.  From 
establishing  flexible  pricing 
structures  and  capturing  cus¬ 
tomer  preference  data  to  coor¬ 
dinate  special  promotions  to 
working  with  suppliers  to 
develop  new  or  customized 
products  and  effectively  man¬ 
aging  stock  and  inventory,  the 
agile  organization  recognizes 
opportunities  to  maximize  the 
value  of  every  aspect  of  its 
supply  chain. 
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Cover  Story 


Sarbanes-Oxley  compliance 
efforts  are  eating  up  CIO  time 
and  budgets.  Worse,  CIOs  are 
being  relegated  to  a  purely 
tactical  role.  And  that  may  be 


the  CFO’s  plan. 
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BY  CHRISTOPHER  KOCH 


►  How  CFOs  are  using  Sarbanes- 
Oxley  to  gain  control  of  IT 

►  Why  the  enterprise  will  suffer 
if  CIOs  remain  disengaged 

►  What  CIOs  can  do  to  influence 
the  compliance  process 


When  CIOs  began  installing  ERP  systems  in  the  ’80s  and  ’90s,  they  unwittingly  took  some¬ 
thing  that  used  to  belong  to  CFOs:  financial  controls.  The  things  that  accountants  used  to  mon¬ 
itor  manually — such  as  making  sure  that  two  signatures  from  the  right  people  went  on  every 
check,  or  reconciling  purchase  orders  against  invoices — all  became  automated  inside  ERP  sys¬ 
tems.  The  meticulous  audit  trail  that  controllers  and  accountants  had  established  over  genera¬ 
tions  for  demonstrating  that  money  was  being  handled  properly  (think  of  black,  leather-bound 
ledgers  and  long  ribbons  of  adding  machine  paper)  disappeared  into  those  ERP  systems  with¬ 
out  a  trace — or  at  least  without  being  properly  documented,  and  certainly  not  to  the  extent 
now  required  by  the  2002  Sarbanes-Oxley  Act,  a.k.a.  Sarbox. 

Today,  CFOs  want  those  controls  back.  If  they  don’t  get  them,  they  believe  they  could  go  to 
jail.  Section  404  of  the  Sarbanes-Oxley  Act  mandates  that  CFOs  have  to  do  more  than  simply 
pledge  that  the  company’s  finances  are  correct;  they  have  to  vouch  for  the  processes  used  to  add 
up  the  numbers.  (See  “What  Section  404  Says,”  Page  60.) 
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Cover  Story  |  Compliance 


Sane  people  don’t  want  to  go  to  prison. 
They  can  even  get  a  little  frantic  about  it. 

That’s  why  CIOs  perhaps  can  forgive  their 
CFOs  for  getting  aggressive  when  it  comes  to 
taking  control  of  Sarbanes-Oxley  compliance 
efforts.  What  CIOs  shouldn’t  forgive,  or  take 
lying  down,  are  their  CFOs’  attempts  to  freeze 
them  out  of  the  process. 

A  recent  survey  by  research  company 
Hackett  Group  found  that  just  12  of  22  com¬ 
panies  surveyed  had  IT  representation  on  their 
Sarbox  steering  committees.  Among  75  pub¬ 
lic  companies  that  Gartner  surveyed  last  fall, 
just  63  percent  said  IT  was  involved. 

Partly,  this  may  be  because  many  compa¬ 
nies  have  been  slow  in  getting  their 
Sarbanes-Oxley  efforts  up  and  running.  Only 
65  percent  of  Gartner’s  respondents  even  had 
a  Sarbox  steering  committee.  Twenty-eight 
percent  had  no  plans  to  form  one. 

But  some  CIOs  see  a  darker  agenda  at 
work — a  conspiracy.  They  fear  Sarbox  has 
become  a  stalking-horse  that  CFOs  are  using  to 
assert  control  over  IT  and  displace  the  CIO  as 
the  company’s  business  process  expert.  Egging 
CFOs  on,  this  theory  goes,  are  the  Big  Four 
accounting  firms,  desperate  to  reassert  them¬ 
selves  after  the  Enron  debacle  (which  turned 
the  Big  Five  into  the  Big  Four  after  Arthur 
Andersen  bit  the  dust)  and  needing  consulting 
revenue  to  replace  what  they  lost  when  most 
split  off  their  consulting  divisions.  (See  “The 
Revenge  of  the  Bean  Counters,”  Page  64.) 

“Finance  and  accounting  organizations 
have  been  pushed  to  the  background  recently 
as  IT  and  supply  chain  have  been  driving 
where  companies  are  going,”  says  one  dis¬ 
gruntled  CIO  who  declined  to  be  identified. 
“Sarbanes-Oxley  is  the  revenge  of  the  bean 
counters.  It’s  a  wedge  for  the  accounting  pro¬ 
fession  to  get  control  of  the  business  again.  ” 

“CIOs  are  getting  left  out  of  Sarbanes- 
Oxley  efforts,  and  it’s  a  travesty,”  says  Garry 
Fowenthal,  CFO  of  Viper  Motorcycle  and 
chairman  of  the  Finance  and  Technology 
Committee  of  Financial  Executives  Interna¬ 
tional  (FEI),  an  association  of  senior  financial 
executives.  (Fowenthal  is  sufficiently  con¬ 
cerned  that  he  is  helping  to  set  up  a  joint 
session  between  FEI  and  the  Society  for  Infor¬ 


mation  Management  [SIM]  at  SIM’s  annual 
meeting  this  September  to  talk  about  how  IT 
and  finance  can  work  together  on  Sarbox.) 
Adds  Gartner  Research  Director  Rich 
Mogull,  “I’m  hearing  stories  about  CFOs  not 
including  CIOs  in  their  compliance  visions. 

“I  think  that’s  a  big  mistake.” 

The  Dark  Agenda 

Right  now,  CFOs  are  setting  up  compliance 
committees,  often  headed  by  their  control¬ 
lers  and  staffed  by  internal  auditors  and 
consultants  from  the  Big  Four  accounting 
houses,  and  sending  them  out  in  pursuit  of 
any  and  all  business  processes  and  IT  systems 
that  could  have  any  impact  on  the  balance 
sheet.  IT  systems  across  the  country  are  glow¬ 
ing  eyeshade  green  as  accountants  flock 
around  them  to  figure  out  how  they  work 
and  document  those  buried  controls. 

For  CIOs,  this  can  be  a  huge  distraction  and 
an  enormous  energy  drain. 

“We’ve  taken  a  substantial  productivity  hit 
from  this,”  says  Brunson  White,  CIO  of  util¬ 
ity  company  Energen.  “We  didn’t  do  much 
besides  governance  work  last  January.  Sar¬ 
banes  has  pulled  some  of  our  best  resources 
and  altered  our  plans  for  other  projects.” 


Sarbox  is  also  expensive.  Another  utility 
CIO,  Dennis  Klinger  of  Florida  Power  & 
Fight,  says  his  company  has  already  spent 
“multiple  millions  of  dollars”  on  compliance, 
most  of  it  on  labor.  And  just  as  companies  are 
starting  to  loosen  their  purse  strings,  much  of 
that  money  is  coming  out  of  IT’s  hide. 

But  where  there’s  pain,  there’s  also  oppor¬ 
tunity. 

If  CIOs  can  take  Sarbox  beyond  mere  com¬ 
pliance,  and  automate  and  streamline  business 
processes  and  financial  controls  so  that  the 
cost  of  compliance  goes  down  over  time  while 
business  performance  improves,  they  could 
become  heroes.  But  if  they  just  play  a  tactical 
role,  focusing  only  on  IT-specific  controls  and 
leaving  the  rest  to  the  CFOs  and  the  account¬ 
ants,  that  could  fix  a  hard,  clear  varnish  over 
the  view  in  many  executive  suites  that  IT 
should  be  forever  subservient  to  finance. 

Which,  according  to  many,  is  just  what 
finance  has  in  mind.  As  a  former  corporate 
vice  president  of  IT,  C.  Fee  Jones,  chairman 
and  CEO  of  Essential  Group,  a  pharmaceuti¬ 
cal  services  company,  has  had  frontline 
experience  on  both  sides  of  the  IT-finance 
battleground,  and  he  says  that  many  CFOs 
would  like  to  see  CIOs  left  out  of  the  Sarbox 


What  Section  404  Says  -A. 


The  official  word  from  the  Securities  and  Exchange 
Commission  on  what  Sarbanes-Oxley  demands 

According  to  the  SEC,  companies  must: 

“Include  in  their  annual  reports  a  report  of  management  on  the  company's  internal 
control  over  financial  reporting." 

The  control  report  must  include: 

►  “A  statement  of  management’s  responsibility  for  establishing  and  maintaining 

adequate  internal  control  over  financial  reporting.” 

►  “Management's  assessment  of  the  effectiveness  of  the  company's  internal  control 

over  financial  reporting.” 

►  “A  statement  identifying  the  framework  used  by  management  to  evaluate  the 

effectiveness  of  the  company’s  internal  control  over  financial  reporting.” 

►  “A  statement  that  the  registered  public  accounting  firm  that  audited  the 

company’s  financial  statements.. .has  issued  an  attestation  report  on  management’s 
assessment  of  the  company’s  internal  control  over  financial  reporting." 
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equation.  Why?  Because,  he  says,  “it  would 
give  CFOs  control  over  one  of  the  largest  fixed 
costs  in  the  company:  IT.” 

It’s  beginning  to  look  as  if  Sarbanes-Oxley 
will  be  the  greatest  test  yet  of  CIOs’  standing 
within  the  enterprise. 

The  Sarbox  Disconnect 

Running  Sarbanes-Oxley  efforts  is  not  an 
option  for  most  CIOs.  Sarbox  is  about  finan¬ 
cial  processes.  And  each  year  when  they  sign 
off  on  the  numbers,  it’s  the  CFOs’  necks  on 
the  line  (along  with  the  CEOs’ ) .  “  Controls  and 
processes  around  financial  reporting  indicate 
the  money  guy  should  be  intimately  involved 
[in  Sarbox],”  says  AMR  Vice  President  of 
Research  John  Hagerty.  A  recent  AMR  sur¬ 
vey  found  that  72  percent  of  Sarbanes-Oxley 
compliance  teams  were  led  by  finance,  and 
just  4  percent  by  IT.  (The  remainder  were  led 
by  other  business  functions,  plus  legal  and  the 
board  of  directors. )  But  CFOs  will  not  be  able 
to  prove  compliance  without  the  CIO.  In  most 
cases,  the  CFO’s  expertise  ends  where  his 
numbers  feed  into  information  systems. 

Most  CFOs  are  aware  of  that,  of  course. 
Fiowever,  they  have  options  about  where  to 
go  to  get  help.  They  could  delegate  compli¬ 
ance  to  internal  audit  (another  group  lacking 
a  good  understanding  of  IT  issues)  or  hire 
external  consultants.  But  if  CFOs  do  an  end 
run  around  IT  and  keep  Sarbox  efforts  within 
the  domain  of  the  accountants  and  consult¬ 
ants,  they  could  lose  an  opportunity  to  make 
the  business  run  better.  Blackett  Group  found 
that  47  percent  of  companies  it  recently  sur¬ 
veyed  still  use  stand-alone  spreadsheets  as 
part  of  their  financial  reporting  process, 
meaning  that  the  controls  used  to  trace  and 
audit  the  processes  are  essentially  manual. 
Somebody  throws  numbers  into  a  spread¬ 
sheet  and  passes  them  to  someone  else  until 
they  wind  up  in  the  annual  report.  Manual 
financial  controls,  as  any  auditor  will  tell  you, 
are  time-consuming,  labor-intensive  and 
costly;  they’re  why  companies  abandoned 
those  black  ledgers  in  the  first  place. 

“If  you  can  automate  it,  and  make  it  repeat- 
able,  you  can  know  the  controls,”  says  Marc 
West,  CIO  of  video  game  maker  Electronic 


The  Conspiracy 
By  the  Numbers 


Only  12  Of  22  companies 
surveyed  had  IT  representa¬ 
tion  on  their  Sarbox  steering 
committees. 

72%  of  Sarbanes-Oxley 
compliance  teams  were  led 
by  finance. 

4%  were  led  by  IT. 

$3  billion  was  spent  on 
Sarbox  compliance  in  2003. 

About  90%  of 

that  was  spent 
on  internal  staff 
and  consultants. 

SOURCES:  Hackett  Group,  Gartner,  AMR 

Arts.  “If  it’s  manual,  it’s  more  difficult  to  con¬ 
firm  the  process  and  test  it.” 

AMR  estimates  that  of  the  roughly  $3  bil¬ 
lion  spent  on  Sarbanes-Oxley  compliance  in 
2003,  about  90  percent  was  spent  on  internal 
staff  and  consultants.  To  keep  Sarbox  from 
becoming  an  annual,  recurring  nightmare, 
companies  need  to  automate  financial  controls 
(documenting  them  this  time)  and  replace 
some  of  the  labor-intensive  manual  detective 
work  with  software  and  hardware.  That  shift 
needs  a  leader.  And  that  leader  logically  should 
be  the  CIO  because  the  CIO  will  have  to  main¬ 
tain  and  support  those  automated  controls. 

But  just  like  Y2K,  consultants  and  vendors 
are  descending  upon  CEOs  and  CFOs  and  sell¬ 
ing  them  magic-bullet  software  solutions  for 
Sarbanes-Oxley  over  the  heads  of  CIOs.  It’s 
ERP  all  over  again.  The  financial  controls  gap 
inside  most  ERP  systems  today  is  partly  the 
product  of  the  communication  gap  between 
those  who  bought  ERP  systems  (CEOs  and 
CFOs)  and  those  who  installed  and  maintained 
them  (CIOs).  ERP  projects  went  sour  when 


business  leaders  and  CIOs  could  not  agree  on 
how  best  to  automate  business  processes 
in  ways  that  could  be  integrated,  supported 
and  maintained  by  IT.  Sarbanes-Oxley  could 
easily  lead  to  that  same  disconnect. 

Sarbanes-Oxley  means  CIOs  and  CFOs 
need  each  other  more  than  ever.  Whether  they 
will  ever  get  around  to  admitting  it  is  another 
matter.  But  if  someone  needs  to  swallow  his  or 
her  pride  and  make  the  first  move,  it’s  the  CIO. 

The  CIO’s  Dilemma 

Today’s  corporate  climate  is  not,  however, 
conducive  to  compromise.  Consultants  and 
internal  auditors  are  getting  in  CIOs’  faces  and 
demanding  tighter  controls  in  IT  without  deep 
knowledge  of  either  Sarbanes-Oxley  or  IT. 

“I’ve  been  told  that  I  now  need  to  submit 
every  requisition  to  finance  for  approval  before 
I  can  spend  my  budget,”  says  one  angry  manu¬ 
facturing  company  CIO  who  declined  to  be 
identified.  “The  CFO  has  delegated  it  to  the 
controller,  who  has  hired  all  these  young  audi¬ 
tors  and  consultants  who  think  they’re  on  a 
mission.  They  see  Sarbanes-Oxley  being  above 
and  beyond  everything  else  we’re  doing.  It’s 
annoying  because  there  are  more  important 
things  we  should  be  doing.  ”  Even  though  she  is 
part  of  the  company’s  Sarbox  steering  com¬ 
mittee,  this  CIO  has  given  up  hope  that  the  proj¬ 
ect  will  lead  to  the  kind  of  process  improvement 
and  automation  that  could  provide  a  long-term 
benefit  to  the  business.  “Everybody  will  do 
what  they  have  to  do  to  get  through  the  com¬ 
pliance  door,  and  the  funding  and  overall 
attention  and  priority  for  the  other  process 
improvements  will  go  where  they  always  go — 
to  the  bottom  of  the  list,”  she  says. 

Mostly,  CIOs  resent  Sarbanes-Oxley.  IT 
has  been  suffering  through  a  funding  drought 
since  2000,  and  now  that  corporate  revenue  is 
finally  bubbling  up  again,  Sarbox  has  cut  to 
the  front  of  the  line.  “We  haven’t  been  able  to 
get  much  funded,”  says  Electronic  Arts’  West. 
“Now  here  comes  Sarbanes-Oxley  and  you 
have  to  find  money  in  your  budget  to  docu¬ 
ment  processes.  It’s  frustrating.” 

West  is  trying  to  turn  that  frustration 
around  by  using  Sarbox  as  a  lever  to  revamp 
governance  processes  across  the  business  and 
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You've  got  inventory  covered.  You've  got  shipping  covered 
What  about  surprises? 


Questions  are  everywhere.  Insight  is  not.  Making  important  decisions  is  your  job.  Delivering  the  insight  to  help  you  make  smarter  decisions 
is  ours.  With  business  applications  from  supply  chain  management  to  manufacturing,  we  have  the  experience  and  resources  to  help 
you  succeed  in  a  business  world  where  the  only  thing  certain,  is  uncertainty.  To  learn  more,  visit  microsoft.com/BusinessSolutions/lnsight 
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in  IT.  “I  think  this  will  beoneofthe  bestthings 
for  IT  in  the  long  run  because  it’s  an  opportu¬ 
nity  to  improve  the  ways  we  do  things,”  adds 
Brad  Friedman,  vice  president  of  IS  for 
Burlington  Coat  Factory  and  the  Sarbox  point 
man  for  Burlington  CIO  Mike  Prince.  “You 
have  to  brainwash  yourself  into  looking  at  it 
like  that  or  you  will  dread  it,  because  it’s  not  a 
one-time  event.” 

But  Friedman  acknowledges  that  he’s  hav¬ 
ing  a  hard  time  knowing  where  to  start.  Tike 
many  IT  executives,  he  is  desperately  seek¬ 
ing  guidance  for  this  brave  new  world  of  Sar- 
box-enabled  governance. 

“If  you  read  through  the  control  objectives 
in  Sarbanes-Oxley,  they’re  very  general,”  says 
Friedman.  “Trying  to  burrow  down  to  the 
detail  and  understand  what  will  be  looked  for 
by  the  external  auditor  is  very  difficult.  It’s 
also  difficult  to  draw  the  line  between  IT 
processes,  operational  processes  and  finan¬ 
cial  processes.” 

The  CIO  Solution 

At  utility  NStar,  CIO  Gene  Zimon  took  an 
early  leadership  role  by  suggesting  that  the 
company  approach  Sarbox  the  same  way  it 
did  Y2K.  Accordingly,  NStar  created  an  over¬ 
all  steering  committee  that  meets  monthly  and 
includes  the  top  functional  executives  from 
around  the  company.  Zimon  volunteered  his 


program  office  director  to  help  coordinate  the 
effort.  Working  with  the  finance  group  and 
consultants,  the  project  leadership  parsed  the 
project  into  1 0  major  processes  by  reverse 
engineering  the  balance  sheet  and  income 
statement  preparation  process.  “We  took  the 
numbers  and  worked  backwards  to  find  every 
system  that  contributed  something  to  each  of 
them,”  says  Zimon.  Each  of  the  1 0  processes 
was  treated  as  a  distinct  project,  each  with  its 
own  steering  committee,  a  business  sponsor, 
internal  audit  consultant,  and  a  business  and 
IT  lead  assigned  to  do  the  dirty  work  of  fer¬ 
reting  out  the  controls,  documenting  them 
and  resolving  any  gaps  in  the  process.  “The 
most  important  thing  was  defining  the  areas 
we  wanted  to  look  at,  to  make  it  all  real  and 
measurable,”  Zimon  says.  “Otherwise,  it  all 
seems  too  vague.” 

At  Energen,  CIO  White  is  taking  the 
same  reverse  engineering  approach  to  con¬ 
trols,  trying  to  automate  the  ones  he  can.  One 
is  change  management  for  Energen’s  ERP  sys¬ 
tem.  Right  now,  the  process  for  making  a 
change  to  the  system — say  a  tax  rate  change 
or  a  bug  fix — is  “arduous  and  requires  many 
sign-offs,”  says  White.  Any  changes  that  can 
affect  financial  data  will  have  to  be  reported 
under  Sarbanes-Oxley,  and  if,  for  example,  a 
bug  in  the  ERP  software  means  past  financial 
data  was  not  correct,  the  company  may  need  to 


restate  earnings.  That  means  change  manage¬ 
ment  must  be  much  more  carefully  docu¬ 
mented  and  monitored  than  in  the  past.  So 
White  is  planning  to  automate  the  change 
request  and  sign-off  processes  to  speed  things 
up  as  much  as  possible.  But  he’s  still  worried 
that  the  new  levels  of  scrutiny — and  the  com¬ 
ing  requirement  in  Sarbanes-Oxley  Section 
309  that  material  changes  to  financial  be 
reported  in  real-time — will  prevent  those 
changes  from  happening  as  fast  as  some  in 
finance  would  like.  “There  isn’t  a  whole  lot 
more  time  to  milk  out  of  the  change  process,” 
he  says.  “If  it  takes  a  week  then  that’s  the  way 
it  is.  But  people  are  already  telling  me  it’s  not 
fast  enough.” 

The  Knowledge  Gap 

Without  a  good  playbook  for  Sarbanes-Oxley, 
IT  and  business  executives  find  themselves 
dependent  for  advice  upon  external  auditors 
and  consultants.  But  according  to  the  CIOs 
and  analysts  we  spoke  to,  consultants  are  also 
trying  to  figure  out  what  compliance  means. 
And  that’s  yet  another  sore  point  for  CIOs. 

“I’m  not  getting  any  good  advice  about 
what  I’m  supposed  to  be  doing  from  the  con¬ 
sultants  or  the  external  auditors,”  says  the 
anonymous  manufacturing  CIO.  “They  have 
no  clue  what  Sarbox  means  for  IT  yet.  ”  Adds 
Gartner’s  Mogull,  “The  most  common  com- 


The  Revenge  of  the  Bean  Counters 


How  the  auditing  industry  is  using  Sarbanes-Oxley  to  shift  blame  and  generate  revenue 


Wounded  by  its  failure  to  blowthe  whistle  on  accounting 
shenanigans  at  companies  like  Enron  and  WorldCom 
in  2001  and  2002,  the  auditing  industry  now  stands  to 
reap  a  windfall  from  the  very  problem  it  helped  create. The  rem¬ 
edy  the  government  devised  to  prevent  future  malfeasance  in 
corporate  accounting,  the  Sarbanes-Oxley  Act  of  2002,  will  raise 
the  cost  of  corporate  audits  an  expected  25  percent  to  130  per¬ 
cent  depending  on  the  size,  complexity  and  degree  of  decentral¬ 
ization  of  the  company  being  audited.  And  the  Big  Four  accounting 
firms  (Deloitte  &  Touche,  KPMG,  PricewaterhouseCoopers  and 
Ernst  &  Young)  will  garner  even  greater  profits  (estimates  are  all 
overthe  map,  but  they  dwarf  the  auditing  fees)  from  consulting  on 
how  to  do  Sarbox  compliance.  The  catch  phrase  for  this  burgeon¬ 


ing  line  of  work  is  “enterprise  risk  management.”  (Translation:  Sar¬ 
banes-Oxley  is  only  the  beginning  of  your  governance  problems.) 

But  your  auditor  can't  build  the  controls  for  you.  In  an  effort  to 
end  the  conflicts  of  interest  that  brought  down  Arthur  Andersen 
when  it  both  consulted  with  and  audited  Enron,  the  Securities 
and  Exchange  Commission  has  scratched  a  faint  line  in  the  sand 
between  auditing  and  consulting.  “Basically,  you’re  not  supposed 
to  audit  your  own  work,”  says  Jim  DeLoach,  managing  director  at 
Protiviti,  a  company  that  consults  on  compliance. 

But  since  every  major  company  wants  a  Big  Four  stamp  of 
approval  on  its  Sarbox  controls  to  help  ensure  a  clean  audit,  if  a 
Big  Fourfirm  isn’t  auditing  you,  itwill  probably  be  consulting  with 
you,  thereby  virtually  doubling  the  amount  of  business  to  be  had. 


64  CIO  JULY  1,  2004  •  www. cio.com 


plaint  I’m  hearing  about  the  auditors  is  they 
aren’t  providing  enough  clear  guidance.” 
When  he  challenged  some  of  the  auditing 
firms  with  this,  their  response  was  that  the 
rules  haven’t  yet  been  finalized  by  the  Securi¬ 
ties  and  Exchange  Commission.  “I  said,  Well 
that’s  fine,”  recalls  Mogull,  “but  why  are  you 
taking  people’s  money  then?” 

Complicating  the  situation  is  the  longtime 
split  that  has  existed  between  financial  audit¬ 
ing  and  IT  auditing  inside  consulting  firms  and 
the  Big  Four  accounting  firms.  Financial  audi¬ 
tors  have  traditionally  focused  on  controls  and 
overall  business  governance,  while  IT  auditors 
have  consulted  with  CIOs  on  best  practices  for 
running  IT.  And  just  like  the  businesses  they 
serve,  it’s  financial  auditors,  not  the  IT  audi¬ 
tors,  who  are  running  Sarbox  consulting 
engagements.  This  can  lead  to  IT  issues  being 
ignored  or  shoved  to  the  back  burner.  “They 
send  in  financial  auditors  and  IT  auditors  but 
they  are  usually  two  separate  teams  that 
haven’t  created  a  [joint]  strategy,”  says  Sharon 
O’Bryan,  founder  and  president  of  consul¬ 
tancy  OAS  and  a  former  Big  Four  IT  auditor. 
This  is  yet  another  reason  why  IT  may  be  left 
out  of  strategic  planning  for  Sarbanes-Oxley. 

With  so  much  potential  for  confusion  and 
consequent  disaster,  all  top  enterprise  execu¬ 
tives  need  to  stay  in  the  compliance  loop.  Even 
if  an  internal  audit  group  is  charged  with  lead- 


^  _ 

The  Sarbox  Divide 

“CIOs  are  getting  left  out  of  Sarbanes-Oxley  efforts, 
and  it’s  a  travesty.” 

-Garry  Lowenthal,  CFO  of  Viper  Motorcycle  and  chairman  of  the  Finance 
and  Technology  Committee  of  Financial  Executives  International 

“Who  signs  on  the  bottom  line?  The  CFO  and  CEO. 
That’s  who  have  to  put  their  names  on  the  line,  and 
that’s  who  it  comes  back  to.” 

-Dennis  Cavender,  CFO,  Essential  Group 


ing  the  day-to-day  effort  on  Sarbanes-Oxley, 
the  steering  committee  is  a  place  where  other, 
nonfinancial  voices  can  be  heard.  This  will 
eventually  allow  internal  audit  groups  to  save 
face  when  they  realize  that  Sarbox  is  a  much 
bigger  job  than  they  may  have  originally 
thought.  Energen’s  White,  for  example,  is  part 
of  a  seven-member  planning  group  that 
includes  the  CEO,  CFO,  COOs  of  two  sub¬ 
sidiaries,  the  HR  chief  and  chief  counsel.  This 
group  doesn’t  just  democratize  communica¬ 
tion,  however.  It  also  demonstrates  resolve 
and  commitment  from  the  top.  That’s  crucial 
in  most  IT  projects,  but  especially  in  Sarbanes- 
Oxley  because,  as  Burlington  Coat  Factory’s 
Friedman  puts  it,  “There  is  no  value  [in  Sarbox] 
as  far  as  the  user  community  is  concerned.  If 


you  don’t  have  executive  pushdown  on  this 
one,  people  are  not  going  to  move  on  it.” 

The  Sarbox  Compromise 

Most  auditors  and  CFOs  we  spoke  with  say 
that  if  IT  is  being  left  out  of  Sarbanes-Oxley,  it 
is  more  a  sin  of  omission,  and  perhaps  igno¬ 
rance,  than  a  calculated  plot.  “The  extent  of  IT 
involvement  depends  on  how  intuitive  com¬ 
panies  have  been  about  technology-enabled 
controls,”  says  Mark  Findig,  a  partner  with 
Big  Four  firm  KPMG’s  IT  auditing  group.  “If 
there  isn’t  much  understanding,  then  IT  might 
not  be  there  at  the  beginning.  Finance  looks 
at  Sarbanes-Oxley  and  says,  ’How  can  I  do 
this  from  a  numbers  focus?’  It’s  like  a  hub-and- 
spoke  arrangement  where  finance  starts  it  and 


Confusion  could  double  too.  The  firm  your  company  is 
paying  to  do  the  auditing  may  not  approve  of  the  way  another  firm 
designed  the  controls.  To  avoid  that,  auditors  are  allowed  to 
advise  their  clients  during  the  design  process  on  whether  the 
consultants  are  on  the  right  track.  But  that  doesn’t  guarantee  that 
the  auditors  and  consultants  will  agree  in  the  end.  “You  could 
have  disagreement  over  what  should  be  included  in  scope  under 
the  law  and  what  shouldn’t,”  says  Lynn  Edelson,  U.S.  leader  for 
systems  and  process  assurance  at  PricewaterhouseCoopers. 

The  SEC,  however,  isn’t  going  to  wait  while  the  various  parties 
sort  it  out.  Everybody  needs  a  Sarbox-compliant  audit  by  the 
middle  of  2005  or  CEOs  and  CFOs  could  be  looking  at  jail  time. 
"The  definition  between  an  A  and  an  F  grade  isn’t  clear  yet,”  says  a 
source  who  asked  not  to  be  identified.  “We  won’t  know  until  we 
have  some  cases  in  the  court  system."  Either  way,  the  auditors 
and  consultants  will  have  their  meters  running. 


Auditors  say  that  Sarbanes-Oxley  simply  legislates  that  they 
do  what  they  used  to  do  as  a  matter  of  course:  honest,  thorough 
audits.  Sometime  during  the  go-go  '90s,  audits  became  a 
commodity,  with  companies  shopping  the  (then)  Big  Five  for  the 
cheapest  price.  The  auditors  obliged,  turning  what  used  to  be  a 
thorough  test  of  a  company’s  financial  controls  into  something 
less.  “It  was  the  relatively  lax  regulation  climate  that  put  so  much 
[downward]  pressure  on  audit  fees,"  says  John  Parkinson,  a 
former  consultant  and  chief  technologist  for  the  North  American 
region  of  consulting  company  Capgemini.  “No  question, 
companies  paid  as  little  as  possible  to  get  a  10-K.  The  accounting 
firms  went  along  because  they  had  no  choice.  They’re  rubbing 
their  hands  in  glee  now  because  they  are  doing  the  job  they 
should  have  been  doing." 

And  getting  paid  double  for  it. 

-C.K. 
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How  to  Get  a  Seat  at  the 
Sarbox  Compliance  Table 


Make  compliance  a  formal  project.  If  Sarbanes-Oxley  is  ad  hoc,  it  will  likely  stay 
with  finance,  and  the  CIO  is  more  likely  to  be  presented  with  a  list  of  demands  for 
impossible  work  to  be  done  under  impossible  deadlines. 

Learn  to  speak  CFO.  Sarbanes-Oxley  mixes  IT  controls  with  financial  controls. 

Both  functions  use  a  different  language  to  discuss  and  interpret  controls.  If  you  can’t 
speak  CFO,  find  an  interpreter. 

Volunteer.  CIOs  who  get  out  in  front  by  volunteering  their  own  time  and  project 
management  expertise  will  have  a  bigger,  more  important  role  in  the  project  and 
going  forward. 

Meet  the  auditors.  CIOs  need  to  understand  financial  controls  as  well  as  the  finance 
people.  Arrange  your  own  meeting  with  the  auditors  to  learn  their  issues  and  to  help 
them  understand  yours. 

Meet  the  vendors.  Head  off  the  Sarbox  software  snake  oil  peddlers  before  they  try  to 
sell  directly  to  the  CEO  or  CFO.  Then,  when  they  do  (and  they  will),  you  can  offer  an 
informed  opinion. 

Focus  on  value.  If  compliance  is  viewed  as  a  way  to  improve  the  business,  Sarbox  can 
be  a  springboard  to  more  important  projects  such  as  role-based  portals,  for  example, 
or  single-instance  ERP  consolidation. 

Automate  controls.  Many  financial  controls  are  still  manual.  CIOs  can  add  tremendous 
value  by  automating  them  and  becoming  their  custodians. 

Get  help.  Utilities  have  been  laboring  under  Sarbanes-Oxley-style  regulations  for 
years.  Reach  out  to  a  fellow  CIO  at  a  utility  to  ask  for  advice.  -C.K. 
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brings  in  other  groups  as  they  go. ” 

CFOs  are  also  struggling  with  how  to 
define  other  executives’  roles  in  Sarbanes- 
Oxley.  “Who  signs  on  the  bottom  line?”  asks 
Dennis  Cavender,  CFO  of  Essential  Group, 
his  voice  shaking  with  emotion.  “The  CFO 
and  CEO.  That’s  who  have  to  put  their  names 
on  the  line,  and  that’s  who  it  comes  back  to.  I 
don’t  see  Sarbanes-Oxley  as  a  confrontation 
between  the  CFO  and  CIO;  I  see  it  as  being  a 
team  that  has  to  work  closer  together,  or  the 
processes  and  internal  controls  will  fall  apart.” 

CIOs  could  do  everyone  a  favor  by  defining 
their  role  in  Sarbanes-Oxley  themselves.  After 
companies  get  over  the  initial  shock  of  dis¬ 
covering  how  many  manual  financial  controls 
they  need  to  document,  the  CIO  eventually 
will  be  assigned  to  automate  them  to  save  time 
and  expense  in  quarterly  compliance  efforts. 
“The  CIO  will  become  the  custodian  of  con¬ 
trols,”  says  Lindig.  “The  finance  function  has 
to  own  them  because  they  are  the  last  line  of 
defense  before  the  audit,  but  as  the  controls 
are  distributed  into  the  organization,  you  need 
to  establish  custodial  and  execution  respon¬ 
sibilities.  That’s  what  Sarbanes-Oxley  shines 
a  bright  light  on.  You  have  to  have  an  account¬ 
ability  model  for  those  controls.” 

This  could  be  the  natural  role  for  CIOs — 
think  access  rights  to  systems,  constructing 
employee  portals,  and  other  instances  where 
the  CIO  already  defines  and  manages  auto¬ 
mated  controls.  But  it’s  a  short  step  from  there 
to  a  much  larger  role  that  many  CIOs  have 
been  reluctant  to  contemplate:  the  move  from 
simply  owning  and  maintaining  the  IT  plumb¬ 
ing  to  becoming  accountable  for  the  accuracy 
and  integrity  of  the  data  flowing  through 
those  pipes — the  data  controller,  as  John  Lenz, 
partner  at  consulting  company  Tatum  Part¬ 
ners,  puts  it.  “Just  as  we  have  financial  con¬ 
trollers  today  who  assure  the  accuracy  and 
integrity  of  numbers,  we  will  have  data  con¬ 
trollers  who  assure  the  accuracy  and  integrity 
of  data,”  Lenz  suggests. 

Some  CIOs  have  already  accepted  that 
accountability.  Electronic  Arts’  West  signs  a 
certification  to  his  CFO  that  the  data  from  his 
financial  IT  systems  is  accurate.  The  CFO  and 
CEO  are  still  ultimately  (and  legally)  account¬ 


able  if  the  numbers  are  wrong,  but  subcertifi¬ 
cation  puts  functional  executives’  necks  on  the 
line  internally  and  in  civil  lawsuits.  Gartner 
predicts  that  by  next  year,  70  percent  of  pub¬ 
licly  traded  companies  will  require  their  CIOs 
to  do  it. 

CIOs  who  say  they  are  currently  satisfied 
with  their  role  in  Sarbanes-Oxley  have  one 
thing  in  common:  They  are  defining  their  role 
themselves.  They  are  volunteering  to  help 
coordinate  the  effort  and  offering  project 
management — IT’s  unique,  golden  asset — to 


Share  Your  Opinion 


Is  Sarbox  just  a  wedge  in  the  door  for  the 
accounting  profession  to  regain  control  of  the 
business?  Will  you  be  the  hero  who  automates 
so  that  the  cost  of  compliance  goes  down  over 
time?  Or  will  your  narrow  focus  on  IT-specific 
controls  condemn  you  to  a  future  as  a  slave  of 
finance?  Go  to  the  online  version  of  this  article 
to  ADD  A  COMMENT. 

cio.com 


whomever  wants  it. 

“I  got  involved  and  pushed  the  issue,”  says 
NStar’s  Zimon.  “I  thought,  Better  to  get 
involved  early  than  have  the  business  come  to 
me  with  a  list  of  demands  [just  before  the 
deadline].”  By  turning  Sarbox  into  a  “proj¬ 
ect”  like  Y2K,  and  volunteering  resources  to 
staff  it,  Zimon  got  to  have  more  input  into  the 
company’s  governance  model.  He  also  gained 
access  to  an  early  warning  system  that  informs 
him  of  issues  bubbling  up.  Now  he’s  working 
on  building  a  joint  business  and  IT  group  to 
continue  to  monitor  and  support  the  financial 
controls  after  the  first  round  of  Sarbox  passes. 

“I  talk  to  CIOs  who  say  this  isn’t  an  issue 
for  them  like  it  is  for  me,”  says  White. 

“I  can’t  help  but  wonder  if  they  aren’t  in  for 
a  rude  awakening. ”  PTE1 


Executive  Editor  Christopher  Koch  can  be  reached  at 
ckoch@cio.com. 
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ideas  every  step  of  the  way.  T urn  your  inspiration  into  a  colorful  reality  with  Ricoh's  document  management  solutions. 
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To  regain  investor  confidence 
and  improve  the  bottom  line, 
the  mutual  fund  industry  needs 
to  integrate  transactions  up  and 
down  the  supply  chain 


nvestors  love  mutual  funds. 

IEven  after  late  trading  and  market  timing  abuses  sur¬ 
faced  in  late  2003,  investors  poured  money  into  equity' 
mutual  funds  at  a  record  pace  this  year;  net  inflow  was 
more  than  $100  billion  for  the  first  quarter.  Overall, 
$7.6  trillion  is  invested  in  more  than  8,000  funds. 

Investors  hate  scandal.  From  September  2003  to 
the  end  of  March  2004,  they  pulled  a  total  of  $43  bil¬ 
lion  from  the  17  fund  companies  (including  Janus  and 
Putnam)  that  figured  most  prominently  in  trading 
scandals,  according  to  researchers  at  Financial  Research  Corp.  For 
the  most  part,  that  money  flowed  to  other  mutual  fund  brands  with 
more  pristine  reputations  instead  of  to  alternative  investments. 

Investors  want  integrity. 

The  trading  abuses  focused 
attention  on  other  industry 
practices  harmful  to  share¬ 
holders,  including  payments 
from  fund  companies  to  bro¬ 
kers  to  push  their  funds  and 
the  failure  of  brokers  to  credit 
big  investors  with  discounts. 

Proposed  bills  in  Congress 
and  Securities  and  Exchange 
Commission  regulations  aim 
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to  protect  investors  by  boosting  the  already 
prominent  role  of  IT  across  the  mutual  fund 
supply  chain. 

The  proposals  center  on  “straight-through 
processing,”  an  industry  buzz  phrase  for 
automating  mutual  fund  transactions  so  that  the 
entire  process — from  placing  a  trade  to  final  set¬ 
tlement — is  fast,  relatively  seamless  and  less  sub¬ 
ject  to  manipulation.  Though  a  straightforward 
concept,  straight-through  processing  requires 
substantial  integration  and  cooperation  among 
members  of  the  mutual  fund  supply  chain.  This 
supply  chain  (which  includes  fund  companies, 
brokers,  401  (k)  and  pension  plan  administra¬ 


tors,  and  a  set  of  middlemen  who  aggregate, 
clear  and  reconcile  transactions )  is  already  highly 
automated.  The  manual  processes  that  remain, 
however,  have  left  investors  vulnerable  to  trad¬ 
ing  errors  and  abuses  as  well  as  high  manage¬ 
ment  fees.  Using  IT,  members  of  the  mutual  fund 
supply  chain  can  improve  efficiency,  manage  risk 
and  improve  regulatory  compliance — all  criti¬ 
cal  moves  for  maintaining  investor  confidence 
in  mutual  funds. 

“Quality,  integrity,  reliability — that’s  table 
stakes,”  says  Susan  Kozik,  executive  vice 
president  and  CTO  of  TIAA-CREF,  one  of 
the  world’s  largest  retirement  organizations, 


MICHAEL  H  ARTE,  CIO  of  PFPC,  a  mutual  fund  transfer  agency,  is  using  Web  services 
to  increase  his  company’s  role  as  an  information  intermediary. 


.  M 


with  more  than  $300  billion  in  assets,  includ¬ 
ing  mutual  funds,  under  management.  “If 
there’s  a  failure  in  any  part  of  my  value  chain, 
I’m  exposed.” 

Most  of  the  time,  companies  count  IT 
investments  for  regulatory  compliance  as  a 
cost  of  doing  business,  rather  than  an  oppor¬ 
tunity  to  gain,  or  to  preserve,  competitive 
advantage.  Straight-through  processing  does 
entail  costs,  but  the  benefits  will  reverberate 
across  the  mutual  fund  industry. 

FOR  FUND  MANAGERS, 

INTEGRITY  DRAWS 
INVESTORS 

Some  mutual  fund  managers  are  already  using 
straight-through  processing,  but  regulatory 
rumblings  are  encouraging  more  widespread 
adoption  (which  ultimately  could  increase 
shareholder  returns). 

In  November  2003,  the  U.S.  House  of  Rep¬ 
resentatives,  by  a  418-2  vote,  passed  a  bill 
requiring  that  mutual  fund  companies  disclose 
their  fees  more  plainly  to  investors.  The  Senate 
is  currently  considering  the  measure,  along  with 
several  other  bills  aimed  at  protecting  mutual 
fund  investors.  The  possibility  of  getting  dinged 
by  regulators  for  failing  to  keep  costs  down  puts 
a  new  premium  on  being  lean,  says  Erwin 
Martens,  TLAA-CREF’s  executive  vice  presi¬ 
dent  of  risk  management.  “Operational  over¬ 
sight  has  to  be  rock-solid,  first-class,”  he  says. 

But  even  before  Congress  got  involved, 
intermediaries — such  as  the  brokers  who  exe¬ 
cute  the  trades  and  the  custodians  who  hold 
the  funds’  assets — were  pushing  for  automa¬ 
tion.  “There’s  a  clear  link  to  automating  those 
processes  and  reducing  head  count,”  says  Bill 
Brucella,  TIAA-CREF’s  vice  president  for 
investments  information  technology,  because 
fewer  people  are  needed  to  review  transac¬ 
tions  manually.  Automation  also  reduces  mis¬ 
takes  that  can  lead  to  trade  errors  that  cost 
thousands  of  dollars  to  correct.  “We  send  the 
trade  to  a  broker,  the  broker  and  custodian 
match  up  what  we’re  doing,  and  we  expect  to 
get  a  99  percent  success  rate,”  Brucella  says. 

At  a  Senate  hearing  last  fall,  as  mutual  fund 
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abuses  were  unfolding,  New  York  Attorney 
General  Eliot  Spitzer  alleged  that  investors  are 
being  overcharged  billions  of  dollars  for  sky- 
high  management  fees.  IT  can’t  address  one  of 
Spitzer’s  goals:  getting  fund  companies  to 
negotiate  lower  fees  for  advisory  services.  But 
IT  can  play  a  key  role  when  it  comes  to  reduc¬ 
ing  the  tens  of  billions  of  dollars  in  annual 
transaction  costs  that  the  fund  companies 
accumulate  through  securities  trades. 


Three  years  after  TIAA-CREF  embarked 
on  its  straight-through  processing  initiative, 
that  automation  has  contributed  to  a  halving 
of  trading  costs,  Brucella  says.  Lower  expenses 
mean  higher  returns  for  investors.  “Commis¬ 
sion  costs  go  right  to  the  bottom  line  perform¬ 
ance  of  the  fund,”  he  says.  The  majority  of 
TIAA-CREF’s  equity  transactions  now  are 
executed  using  an  industry-standard  messag¬ 
ing  protocol  called  FIX. 


With  the  mutual  fund  industry’s  ethical 
woes  continuing  to  make  headlines,  TIAA- 
CREF  has  begun  to  roll  out  new  systems 
designed  to  ensure  the  integrity  of  the  trading 
process.  Integrity  goes  deeper  than  having  a 
good  reputation,  observes  Martens.  Mutual 
funds  need  documented  business  processes  to 
prove  to  investors  that  their  operations  are 
above  board.  Investors  “are  going  to  go  to  the 
funds  that  have  high  integrity,”  he  says.  TIAA- 
CREF  manages  retirement  plans  for  15,000 
academic  and  research  institutions.  Accord¬ 
ing  to  market  research  company  Celent  Com¬ 
munications,  the  largest  category  of  IT 
spending  by  securities  companies  this  year — 
an  estimated  $7.6  billion — is  for  systems  that 
support  institutional  trading.  “Institutions 
want  nothing  to  do  with  scandals.  [There’s]  a 
systematic  voting  for  quality,”  Martens  says. 

To  ensure  that  TIAA-CREF’s  trades  comply 
with  regulations  and  the  company’s  policies, 
Brucella  deployed  a  centralized  order  desk  in 
April  to  aggregate  trade  requests  from  the  com¬ 
pany’s  fund  managers,  institutional  clients  and 
program  trades.  One  application  automates 
compliance  checks  in  real-time  to  ensure  that 
fund  managers  aren’t  trading  improperly  in 
their  own  accounts  (another  problem  Spitzer 
uncovered  in  his  investigations  of  mutual  fund 
improprieties).  “By  eliminating  any  manual 
steps,  it  eliminates  any  mischief  that  could  occur, 
whether  it’s  intentional  or  not,”  says  Kozik. 
“Straight-through  is  hands  off.” 

FOR  FUND  MIDDLEMEN, 

EFFICIENCY  IS 
EXPENSIVE 

For  mutual  fund  intermediaries  such  as 
Charles  Schwab,  the  benefits  of  additional 
investments  in  straight-through  processing  are 
less  clear.  There’s  no  question  that  some  level  of 
IT  investment  will  be  necessary  to  restore 
investor  confidence.  Brokers  and  40 1  (k)  plan 
administrators  assert,  though,  that  at  least 
when  it  comes  to  catching  illegal  late  trades, 
an  electronic  audit  trail  would  be  a  quicker, 
less  expensive  and  less  disruptive  fix  than  the 
methods  proposed  by  the  SEC. 


IT.  ADDRESSES  THE  MUTUAL 


SCANDAL:  LATE  TRADING 

What  happened:  Big-money  investors  were  allowed  by  some  mutual  fund  companies 
to  make  trades  illegally,  after  the  market  closed. 

IT  response:  Depending  on  decisions  made  by  regulators,  a  range  of  solutions  is 
possible,  from  upgrading  existing  systems  to  include  an  electronic  audit  trail  to 
completely  revamping  how  electronic  transactions  are  processed. 

Benefit:  There  are  long-term  efficiency  benefits  for  companies  that  use  an  auto¬ 
mated  clearinghouse  to  process  transactions.  Estimated  costs  vary  from  a  one-time 
expense  of  $300,000  to  $4  million  a  year,  according  to  Charles  Schwab. 

SCANDAL:  MARKET  TIMING 

What  happened:  Favored  investors  were  allowed  to  make  frequent,  short-term  trades 
in  some  mutual  funds  to  take  advantage  of  the  inefficiencies  in  once-a-day  fund 
pricing.  Though  not  strictly  illegal,  these  trades  violated  fund  companies’  policies  for 
buying  and  selling  the  funds  in  question  and  hurt  other  investors  by  raising  transac¬ 
tion  costs.  Now  the  SEC  wants  most  mutual  funds  to  impose  fees  on  redemptions 
made  within  five  days  of  purchase. 

IT  response:  Fund  companies  and  brokers  must  upgrade  and  integrate  systems  they 
use  to  keep  trading  and  account  records. 

Benefit:  Market  timing  becomes  easier  to  spot  and  to  prevent.  Transfer  agents  gain 
business  opportunities  from  fund  companies  that  outsource  recordkeeping. 


SCANDAL:  EXCESSIVE  FEES 

What  happened:  Fund  companies  were  accused  of  gouging  investors  on  management 
fees  and  failing  to  explain  their  other  operating  expenses.  These  practices  aren’t  ille¬ 
gal,  but  consumer  advocates  contend  that  investors  don’t  understand  how  the  fees 
affect  fund  performance.  Now  regulators  want  fund  companies  to  improve  disclosure. 
IT  response:  Fund  companies  can  deploy  systems  that  automate  more  of  their 
internal  business  processes. 

Benefit:  TIAA-CREF,  a  retirement  plan  manager  that  offers  mutual  funds,  has  cut 
its  trading  costs  in  half  by  aggregating  and  automating  trades.  TIAA-CREF  predicts 
more  efficient  processes  will  attract  customers.  -E.V. 
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In  December,  the  agency  proposed  that 
intermediaries — who  initiate  around  80  per¬ 
cent  of  mutual  fund  transactions  for  individual 
investors  in  the  United  States — accelerate  their 
processing  of  buy  and  sell  orders  to  deliver  them 
to  fund  companies  by  4  p.m.  EST,  when  U.S. 
markets  close.  Then  unscrupulous  brokers 
would  be  unable  to  slip  illegal  late  trades  into 
the  batches  of  aggregated  transactions  that  they 
currently  send  to  fund  companies  after  4  p.m. 

Critics  of  the  SEC’s  proposal  say  there’s  lit¬ 
tle  benefit  to  processing  mutual  fund  orders 
earlier  because  it  won’t  reduce  fees  or  limit 
investors’  financial  risk.  Unlike  stocks,  mutual 
fund  shares  are  priced  only  once  a  day,  after 
the  market  closes  and  fund  companies  calcu¬ 
late  the  value  of  the  funds’  underlying  securi¬ 
ties.  Whether  an  investor  places  an  order  at 
10  a.m.  or  3:30  p.m.,  the  settlement  process 
doesn’t  start  until  after  4  p.m.,  notes  Don 
Boteler,  vice  president  of  operations  and  train¬ 
ing  with  the  Investment  Company  Institute,  a 
trade  association  for  fund  companies. 

This  ability  to  trade  in  batches  keeps  costs 
low  and  is  the  reason  that  brokers  can  offer 
“supermarkets”  of  no-load  funds  and  that 

Five  years  ago. 

regulators  have  stopped  jgen 

40 1  (k)  plans  have  no  transaction  fees,  says 
Gavin  Little-Gill,  senior  analyst  with  Tower- 
Group,  a  financial  services  industry  research 
company.  In  public  comments,  Schwab  Senior 
Vice  President  and  Deputy  General  Counsel 
Koji  Felton  wrote  that  implementing  the 
SEC’s  proposal  to  combat  late  trading  would 
require  such  an  extensive  reprogramming  of 
order  processing  and  settlement  systems  that 
it  would  raise  transaction  costs  shared  by 
Schwab  and  the  companies  whose  funds  it 
offers  by  $4  million  a  year — charges  that 
would  be  passed  on  to  investors. 

Felton  notes  that  many  fund  companies 
and  intermediaries  already  have  systems  capa¬ 
ble  of  time-stamping  orders.  If  these  systems 
are  upgraded  to  establish  an  electronic  audit 


trail  that  could  track  every  order,  from  the  time 
the  broker  receives  it  to  the  time  it  is  transmit¬ 
ted  to  the  fund  company,  it  would  be  far  less 
disruptive  to  the  industry.  For  Schwab,  such 
a  change  would  create  a  one-time  cost  of 
between  $300,000  and  $  1  million,  with  no 
recurring  transaction  costs. 

This  blanket  objection  to  aggregating  and 
processing  orders  in  real-time  amounts  to  a  fail¬ 
ure  of  imagination  to  some  observers,  such  as 
Shaw  Lively,  a  research  manager  with  IDC 
Financial  Insights  (a  sister  company  to  C/O’ s 
publisher).  “I  think  the  best  outcome  would  be 
that  a  short-term  burden  results  in  a  longer-term 
benefit  for  the  industry,”  he  says.  “This  is  a  case 
where  deadlines  and  processes  got  built  in  an 
era  before  there  was  a  lot  of  technology.  ”  (Some 
systems  date  back  nearly  two  decades.)  Many 
brokers  still  don’t  have  completely  automated 
systems  for  entering  and  transmitting  orders, 
Lively  says — an  investment  they  would  have  to 
make  if  electronic  audit  trails  are  required. 

One  idea  advocated  by  fund  companies 
and  brokers  alike  is  to  require  most  trades 
not  executed  directly  by  fund  companies  to 
use  an  automated  clearinghouse,  such  as  the 


flow  will  provide  greater  operational  effi¬ 
ciency  and  economies  of  scale.  ” 

FOR  TRANSFER  AGENTS, 

INTEGRATION  IS 
OPPORTUNITY 

Transfer  agents — the  middlemen  who  process, 
buy  and  sell  orders  and  maintain  shareholder 
records  for  mutual  funds — stand  to  gain  the 
most  from  any  regulatory  push  that  encourages 
straight-through  processing.  As  the  require¬ 
ments  for  processing  and  recordkeeping  become 
more  stringent,  mutual  fund  companies  have  an 
incentive  to  offload  these  tasks  to  specialists. 

In  March,  the  SEC  proposed  a  way  to  dis¬ 
courage  market  timing  cases  by  requiring 
mutual  funds  to  charge  a  2  percent  fee  on  sales 
of  shares  within  five  days  of  purchase. 
Another  proposed  rule,  requiring  better  dis¬ 
closure  by  mutual  funds  of  investors’  eligibil¬ 
ity  for  discounts  on  sales  charges  (called 
“breakpoint  discounts”),  would  push  brokers 
and  fund  companies  to  do  a  better  job  aggre¬ 
gating  a  shareholder’s  investments  in  multiple 


everybody  did  their  own  thing.  With  the  recent  scandals, 
ly  pushing  and  said,  ‘You’re  going  to  get  on  board.’ 

-Erwin  Martens,  executive  vice  president  of  risk  management,  TIAA-CREF 


National  Securities  Clearing  Corp.  (NSCC). 
Each  year,  38  million  mutual  fund  transac¬ 
tions  totaling  $578  billion  are  settled  elec¬ 
tronically  using  NSCC’s  Fund/SERV  system, 
and  the  company  offers  other  services  that 
make  it  possible  for  trading  parties  to  auto¬ 
mate  most  of  their  transactions.  No  one  is 
sure,  however,  exactly  what  percentage  of 
mutual  fund  trades  Fund/SERV  covers.  Tow- 
erGroup’s  Little-Gill  estimates  it’s  about  half. 
In  comments  to  the  SEC,  Eric  Roiter,  senior 
vice  president  and  general  counsel  with 
Fidelity,  writes  that  under  the  central  clear¬ 
inghouse  scenario,  the  NSCC,  fund  compa¬ 
nies  and  intermediaries  would  incur  some 
up-front  systems  development  costs,  but  “ulti¬ 
mately,  we  believe  that  centralization  of  order 


accounts.  A  recent  joint  study  by  the  SEC,  the 
National  Association  of  Securities  Dealers  and 
the  New  York  Stock  Exchange  found  that 
investors  eligible  for  discounts  on  sales  charges 
(worth  an  average  of  $364  per  transaction) 
were  overcharged  about  one-third  of  the  time. 

Industry  experts  say  both  the  market  timing 
problem  and  the  failure  to  offer  sales-charge  dis¬ 
counts  result  from  the  inability  of  brokers  and 
fund  companies  to  share  investor  trading  and 
account  information.  The  SEC’s  breakpoint  dis¬ 
count  proposal  would  require  that  brokers 
share  investor  account  data  with  the  mutual 
funds  so  that  the  mutual  funds  could  verify  that 
eligible  investors  received  discounts  (and  also 
detect  market  timers  who  they  have  previously 
barred  from  trading). 
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For  high  density  applications,  the  InfraStruXure  High  Density 
Configuration  is  a  patent-pending  hot  aisle  containment  sys¬ 
tem  that  cools  up  to  20kW  in  a  single  enclosure. 


Flexible  enough  to  be  moved  or  changed  without  system 
reconfiguration,  the  InfraStruXure  High  Density  Configuration 
can  also  be  scaled  to  meet  changing  needs  and  future 
expansion.  This  makes  it  a  perfect  solution  for  converted 
spaces,  as  well  as  high-density  areas. 


Introducing  InfraStruXure " 
High  Density  Configuration 


The  InfraStruXure  "  High  Density  Configuration 

is  a  patent-pending  hot  aisle  containment  system 
that  cools  up  to  20kW  of  blade  servers  in 
a  single  enclosure 


The  InfraStruXure  High  Density 
Configuration  is  ideal  for: 

•  Disaster  Recovery  Sites 

•  Blade  Server  Applications 

•  Converted  Spaces 


Chambers  Doors 
Access  to  hot 
aisle,  locks  for 
security 


If  you're  not  already  dealing  with  such  high  power  densities, 
the  chances  are  you  will  be  soon.  An  on-demand  architecture 
for  NCPI,  InfraStruXure™  includes  power,  cooling,  racks  and 
physical  structure,  security  and  fire  protection,  cabling,  and  the 
management  and  servicing  of  these  elements.  It  is  specifically 
designed  to  meet  ever-changing  IT  requirements  through 
scalable,  modular  and  standardized  components. 


Hot-Aisle  Ceiling  Tiles/  Cable  Trough 
Seals  in  hot  air,  prevents  mixing  with  room  air 


Power 

Distribution  Unit  (PDU) 


UPS 


With  its  modular,  scalable  and  open  building  blocks,  it's 

no  wonder  Infra StruXu re's  rack-based  architecture  is  winning 
over  editors  and  end-users  alike  -  especially  as  blade  servers 
and  server  consolidation  cause  power  densities  to  skyrocket. 


5G 


lnfraStru>\ure 


On-demand  architecture  for  network- 


critical  physical  infrastructure 


NetworkAlfT  FM 
In-row  air  conditioner 
cools  hot  chamber  air 


" More  computing  power,  but  with  more  heat... 
presents  a  serious  problem  for  companies  unprepared  to  meet  the 

cooling  demands  of  a  data  center... 
APC  plays  the  hero 
with  a  three-component 
environmental  system. " 


The  InfraStruXure ” 
Build-Out  Tool  lets 
you  design  and 
specify  InfraStruXure 
solutions  using 
a  Web-based 
configurator. 


Oliver  Rist,  Senior  Contributing  Editor; 
Brian  Chee,  Industry  Expert 
InfoWorld,  3/12/2004 


To  learn  more  about  InfraStruXure,  call  1-888-ISX-2990  today  or  visit  us  at  www.apc.com. 
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You’ve  Picked  A 


Winner! 


CIO  magazine  is  again  the  proud  recipient 
of  the  prestigious  2004  Grand  Neal 
Award— two  years  in  a  row!— the  top  edito¬ 
rial  honor  granted  to  one  publication  from 
nearly  1,300  entries  across  all  categories 
and  circulation  sizes.  CIO  also  won  Neal 
Awards  for  “Best  Single  Issue”  and 
“Best  Article.” 


The  Neal  Award  judges  aren’t  the  only  ones 
who  prefer  CIO  magazine.  CIOs  choose  CIO 
as  the  one  publication  they  rely  on  most  for 
strategies  and  best  practices  for  managing 
information  technology.* 


Often  hailed  for  its  preeminence 
as  the  “Pulitzer  Prize  of  the  business 
press,"  the  Neal  Award  is  the 
business  publishing  industry’s 
annual  salute  to  individual  editors 
for  outstanding  editorial  excellence. 


The  Resource 
for  Information 
Executives 


■X" SOURCE:  CIO  READER  PROFILE  STUDY, 
MRI.  SEPTEMBER  2003 


Integration 


This  task  of  aggregating  thousands  of  investor  trades  and 
accounts  provides  a  potentially  greater  role  for  transfer  agents.  Tim 
Lind,  another  senior  analyst  with  TowerGroup,  says  that  today, 
outsourced  transfer  agents  provide  shareholder  account  mainte¬ 
nance  and  recordkeeping  services  for  only  about  a  quarter  of  total 
shareholder  mutual  fund  accounts.  Otherwise,  fund  companies 
perform  these  tasks  themselves.  But  Lind  expects  more  mutual 
funds  to  outsource  their  recordkeeping  and  the  IT  investment  that 
goes  with  it.  By  outsourcing,  fund  companies  could  shift  the  risk  of 
maintaining  systems  needed  for  processing  transactions,  tracking 
trades  and  performing  the  analysis  necessary  to  catch  unscrupu¬ 
lous  activity,  he  says.  Fund  companies  could  also  benefit  from 
economies  of  scale  that  transfer  agents  achieve  by  servicing  many 
customers. 

Because  the  mutual  fund  supply  chain  includes  so  many  parties, 
information  needs  to  pass  back  and  forth  easily  as  trades  are 
processed.  PFPC,  a  mutual  fund  transfer  agency,  has  recently  invested 
in  Web  services  technology  and  relational  databases  that  enable  its 
mutual  fund  company  customers  to  access  business  applications 
through  a  portal.  For  PFPC,  the  shift  to  Web  services  enables  the  com¬ 
pany  to  support  customers  as  they  roll  out  new  products  and  serv¬ 
ices  or  expand  in  global  markets  without  “being  locked  into 
proprietary  systems,”  says  PFPC  CIO  Michael  Harte. 

FOR  THE  MUTUAL  FUND  INDUSTRY, 

INACTION  IS  NOT 
AN  OPTION 

Some  within  the  mutual  fund  industry  argue  that  new  regulations 
and  the  IT  investments  needed  to  comply  with  them,  won’t  stop  any¬ 
one  bent  on  making  illegal  or  unethical  trades.  But  tracking  trans¬ 
actions  more  assiduously  makes  it  more  likely  that  cheaters  will  be 
dissuaded  or,  if  not,  will  get  caught.  This  matters  to  investors,  who 
have  shown  their  willingness  to  pull  out  of  funds  that  aren’t  man¬ 
aged  honestly,  and  thus  it  matters  to  the  fund  companies,  which  must 
now  compete  on  more  than  simply  how  well  their  funds  perform. 

The  current  IT  transition  in  the  mutual  fund  industry  to 
straight-through  processing  of  trades  will  do  more  than  dis¬ 
courage  mischief;  it  will  also  reduce  business  risks  and  pro¬ 
mote  greater  efficiency.  Straight-through  processing  isn’t  a 
panacea  for  the  industry’s  troubles,  but  it  provides  a  way  to 
address  them.  “Five  years  ago,  everybody  did  their  own 
thing,”  observes  TIAA-CREF’s  Martens,  and  regulators  were 
content  to  push  standards  and  integration  more  gently.  With 
the  recent  scandals,  he  says,  “they’ve  stopped  gently  pushing 
and  said,  ‘You’re  going  to  get  on  board.’”  EQ 


Senior  Editor  Elana  Varon  writes  about  the  financial  services  industry.  You  can 
contact  her  at  evaron@cio.com. 
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Keep  risk  even  lower 


For  nearly  a  decade,  Lionbridge  has  managed  global  technology  outsourcing 
for  major  IT  and  enterprise  customers.  With  20  solution  centers  worldwide,  including 
India,  Ireland,  and  China,  Lionbridge  delivers  scalable  resources  and  a  lowest-total- 
cost  solution.  Our  global  program  management  and  project  governance  model 
drives  seamless  efficiency  across  multiple  time  zones,  languages,  and  cultures. 
And  Lionbridge  code  and  content  methodologies  are  assessed  at  CMM  level  5. 

Develop.  Test.  Deploy.  Globally.  Find  out  how  with  our  self-assessment 
at  www.lionbridge.com/smarter.  And  learn  how  our  proven  process  can 
move  your  critical  IT  activities  offshore  with  near-zero  risk. 


Lionbridge 


www.cio.com  •  JULY  1,  2004  CIO  75 


©2004  Lionbridge  Technologies,  Inc.  Lionbridge  and  the  Lionbridge  Logo  are  registered 
trademarks  of  Lionbridge  Technologies,  Inc.  in  the  U.S.  and  several  other  countries. 


Meet  the  IBM  eServer™  i5  system  —  designed  to  simplify  your  infrastructure.  It’s  the  first  IBM  server  with  POWER5™ 
technology.  And  the  latest  member  of  the  IBM  eServer  iSeries™  family.  What’s  more,  it  can  simultaneously  run  four 
operating  systems,  dynamically  allocating  resources  needed  for  each  application  and  operating  system!  On  demand. 
iSeries  technology  can  also  help  reduce  the  number  of  servers  you  manage  by  as  much  as  85%.  We  invite  you  to 
learn  more  about  how  to  make  your  business  more  efficient.  Just  visit  ibm.com/eserver/consolidate 


5  reasons  why  IBM  eServer  i5  systems  with  Power  Architecture ™  technology  can  simplify  your  infrastructure. 


Runs  four  operating 

Advanced  virtualization 

Capacity  on  demand. 

POWER5  processor- 

Integrated  for  easy 

systems  simultaneously. 

technologies. 

based  64-bit  technology. 

management. 

@  server' 


The  IBM  eServer  i5  system. 
Consolidate.  Integrate.  Celebrate. 
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When  health-care  costs  spiked  at  Pitney  Bowes, 
predictive-modeling  software  uncovered  the  reasons 
why  and  suggested  a  radical  plan  for  containing 
future  expenses  and  improving  employee  health 

BY  ALICE  DRAGOON 


Dr.  Jack  Mahoney  was  frustrated.  In  the  fall  of  2000,  health-care  claims  at  Pitney  Bowes, 
where  Mahoney  is  the  global  health-care  management  director,  had  suddenly  spiked.  As  a  self- 
insured  employer,  the  company  foots  the  health-care  bill  for  most  of  its  27,000  U.S.  employees 
directly,  rather  than  pay  premiums  to  an  insurance  company.  For  the  first  time  in  1 3  years,  Mahoney, 
who  had  a  reputation  for  keeping  costs  down,  was  going  over  budget.  And  he  didn’t  know  why. 

The  data  analysis  tools  he  used  explained  where  his  money  had  gone  the  year  before,  but  offered 
no  explanation  for  why  costs  had  risen,  and  no  clear  indication  what  they  would  be  in  the  future — 
let  alone  what  he  could  do  about  it.  As  a  practicing  physician  who  sees  patients  in  one  of  Pitney 
Bowes’  onsite  clinics  and  a  passionate  advocate  for  employee  health,  Mahoney  wanted  to  be  sure  that 
when  he  cut  costs,  he  maximized  patient  benefits. 

What  Mahoney  needed  was  a  crystal  ball.  He  found  the  next  best  thing  in  the  form  of  predictive 
modeling:  technology  that  employs  either  rules-based  algorithms  or  artificial  intelligence  to 
predict  (in  this  case)  future  health-care  expenses. 

Backed  by  a  health-care  savvy  CEO,  Mahoney  and  his  HR 
counterpart,  David  Horn,  set  aside  their  pet  theories  about 
health-care  cost  drivers,  resisted  the  temptation  of  scope  creep  and 
convinced  skeptical  colleagues  to  trust  the  models’  predictions. 
Then  they  implemented  programs  based  on  those  predictions 
that  improved  care  and  lowered  costs.  In  an  era  when  health-care 
costs  are  swelling  10  percent  to  15  percent  per  year,  predictive 
modeling  has  helped  Pitney  Bowes  slash  the  median  cost  of  care 
for  diabetic  and  asthmatic  employees  by  as  much  as  15  percent 
since  200 1 .  And  it  forecast  a  dramatic  cost  increase  in  one  region 
early  enough  to  give  Mahoney  and  Horn  a  chance  to  counteract  it. 


Reader  ROI 

►  Ways  predictive  modeling 
helps  anticipate  health 
insurance  costs 

►  How  predictive  modeling 
changed  Pitney  Bowes’ 
health-care  benefits 


The  factors  that  make 
any  predictive-modeling 
project  successful 
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ILLUSTRATION  BY  PAUL  BLOW 


Predictive  Modeling 


Now,  Pitney  Bowes,  famous  for  inventing 
the  postage  meter  back  in  1 920,  is  pioneering 
the  use  of  predictive  modeling  in  a  way  that 
may  gamer  competitive  advantage.  Horn,  who 
is  vice  president  for  employment  brand  total 
rewards,  wants  to  pinpoint  the  ideal  combi¬ 
nation  of  benefits  that  motivate  employees  to 
perform  better  at  work — ultimately  increas¬ 
ing  profits  for  the  $4.6  billion  integrated  mail 
services  and  document  management  com¬ 
pany.  Predictive  modeling  will  have  the  biggest 
influence  on  defining  the  benefits  package  and 
the  engaged  workforce,  he  claims. 

Cynthia  Burghard,  a  Gartner  research 
director  specializing  in  health  care,  says  Pitney 
Bowes  is  innovative  in  its  use  of  predictive 
modeling  because  it  has  developed  programs 
to  address  the  issues  its  models  uncovered. 
Even  among  health  insurers  who  use  predictive 
modeling  to  forecast  costs,  she  says,  “There’s 
a  lot  of — so  now  what  do  I  do  ?  ” 

SYMPTOM: 

Feverish  Costs 

The  company’s  foray  into  predictive  model¬ 
ing  was  a  journey  born  out  of  frustration. 
Mahoney,  a  trained  epidemiologist,  and 
Horn  (both  unabashed  numbers  geeks) 
had  kept  Pitney  Bowes’  health-care  expenses 


Pitney  Bowes 
Vital  Statistics 

HEADQUARTERS:  Stamford,  Conn. 

U.S.  EMPLOYEES:  27,000 
2003  REVENUE:  $4.6  billion 

PRODUCTS  AND  SERVICES: 

Integrated  mail  and  document  manage¬ 
ment  systems,  services  and  solutions. 

CUSTOMERS:  Include  all  Fortune  100 
companies. 

HEALTH  BENEFIT  HIGHLIGHTS: 

Free  or  low-cost  health  screenings  and 
immunizations;  seven  onsite  clinics 
offering  free  medication  for  short-term 
illnesses;  cafeteria  with  heart-healthy 
and  Weight  Watchers  menu  items. 


division,  hiring  older  workers  and  more  work¬ 
ers  from  inner  cities  who  didn’t  have  regular 
access  to  health  care  in  the  past.  Mahoney 
believed  that  the  cost  problem  would  get 
worse  if  he  didn’t  act  quickly. 

About  the  same  time  when  Mahoney 
saw  costs  jump,  Horn  was  renegotiating  a 
contract  with  one  of  Pitney  Bowes’  HMO 
vendors.  After  seven  years  of  negotiating 
favorable  rates  based  on  actuarial  data, 


likely  to  get  in  the  coming  year.  If  health  plans 
could  use  predictive  modeling  to  set  their  rates, 
Horn  and  Mahoney  figured  that  Pitney  Bowes 
could  use  it  internally  to  forecast  future  cost 
spikes  in  time  to  take  action  to  minimize  them. 

The  two  pitched  the  idea  to  CEO  Michael 
Critelli,  as  part  of  a  plan  to  control  future  costs 
and  eliminate  nasty  surprises  like  the  2000 
cost  surge.  And  they  promised  a  5-to-l  ROI 
ratio  after  the  first  year.  Having  once  served 
as  head  of  personnel,  Critelli  is  well-versed  in 
the  difficulty  of  managing  health-care  costs 
and  often  speaks  eloquently  on  the  pertinence 
of  maintaining  employees’  good  health  to  the 
success  of  the  company.  Critelli  agreed  to 
sponsor  two  predictive-modeling  projects  in 
part  because  Horn  and  Mahoney  had  a  good 
track  record  of  keeping  costs  down.  But  he 
approved  the  investments  with  the  caveat  that 
Mahoney  and  Horn  had  to  deliver  predictable 
cost  increases  starting  in  200 1 . 

Predictive  modeling  “seemed  like  a  gam¬ 
ble  because  it  was  a  total  unknown,”  says 
Mahoney.  “But  we  knew  that  the  standard 
actuarial  models  weren’t  working  for  us.” 

To  minimize  the  risk,  Mahoney  and  Horn 
started  with  two  pilot  projects.  To  protect 
employees’  privacy,  they  outsourced  the 
projects  (see  “A  Premium  on  Health  Privacy,” 
opposite  page).  They  hired  DxCG  to  project 


Predictive  modeling  was  a  gamble,  “but  we  knew  that  the  standard  actuarial 
models  weren’t  working  for  us,’’  says  Dr.  Jack  Mahoney,  Pitney  Bowes’ 
global  health-care  management  director. 


at  two-thirds  of 
the  industry  bench¬ 
mark.  Yet  they  were  constrained  by  the  limita¬ 
tions  of  retrospective  data  analysis.  At  annual 
review  meetings,  they  got  blank  stares  when 
they  pressed  health-care  vendors  to  project 
costs  for  the  coming  year. 

Their  frustration  reached  the  breaking 
point  in  2000,  when  the  company’s  health¬ 
care  costs  spiked.  “We  knew  our  population 
was  aging,  we  were  seeing  more  chronic 
disease  in  the  population,  and  the  company 
was  growing,”  recalls  Mahoney.  Pitney  Bowes 
was  expanding  its  Management  Services 


which  showed  that  Pitney  Bowes  employees 
tended  to  be  younger  (and  thus  healthier) 
than  average,  Horn  was  stymied.  The  HMO 
negotiator  had  data  showing  that  even  though 
Pitney  Bowes  employees  were  younger,  they 
were  sicker.  And  he  was  using  that  data  to 
justify  a  rate  increase. 

“I  said  to  Jack,  ‘Son  of  a  gun,  every  time  I  said 
something  this  guy  had  an  answer.  He  must  be 
doing  something  we’re  not,’  ”  Horn  recalls.  That 
something  turned  out  to  be  predictive  modeling. 

The  HMO  was  utilizing  algorithms  devel¬ 
oped  by  vendor  DxCG  that  apply  pharmacy 
data  to  predict  how  sick  a  given  population  is 


future  health-care  costs  by  geography  and  to 
validate  the  2001  budget.  And  they  contracted 
with  Medical  Scientists  to  help  identify  the  fac¬ 
tors  most  likely  to  lead  to  an  employee  turning 
into  a  high-cost  claimant. 

DIAGNOSIS: 

A  Sickly  Staff 

Horn  and  Mahoney  began  meeting  with 
DxCG  in  the  fall  of  2000.  The  following 
summer,  Pitney  Bowes  turned  over  its  phar¬ 
macy  and  medical  claims  data  to  DxCG, 
which  ran  the  data  through  its  sophisticated 
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cost  algorithms.  These  algorithms  can  fore¬ 
cast  health-care  costs  for  the  coming  year 
with  much  more  precision  than  traditional 
actuarial  models  because  they  take  more 
factors  into  account.  DxCG  provided  insight 
into  why  cost  increases  varied  by  geography, 
enabling  Pitney  Bowes  to  fine-tune  health 
plans  by  region. 

The  model  flagged  a  looming  problem  in 
the  New  York  City  area  where  Pitney  Bowes 
handles  mailroom  operations  or  maintenance 
for  21 ,000  customer  sites.  Although  actuarial 
and  underwriting  models  (such  as  those  that 
factor  in  age  and  sex)  predicted  costs  would 
rise  there  by  just  2  percent,  the  DxCG  model 
warned  of  an  increase  of  more  than  40  percent. 
A  higher-than-average  proportion  of  the 
employees  in  that  area  had  diabetes,  asthma  or 
cardiovascular  disease,  and  their  medication 
usage  patterns  were  a  harbinger  of  high 
costs  to  come,  according  to  DxCG’s  model. 
If  those  illnesses  aren’t  managed  carefully, 
says  Mahoney,  patients  will  get  sicker  and 
the  cost  to  treat  them  will  escalate. 

Mahoney  and  Horn  quickly  launched 
education  initiatives  to  encourage  employees 
to  better  manage  their  health.  They  offered 
free  or  low-cost  immunizations  and  health 
screenings,  made  sure  that  employees  knew 
the  location  of  the  nearest  walk-in  medical 
facility  and  urged  them  to  rely  on  it  instead  of 
the  ER  for  routine  medical  care.  A  group  of 
new  employees  in  New  York  had  previously 
been  on  Medicaid.  “There  are  no  copays  and 
people  use  ERs  when  they  could  use  a  doctor’s 
office,”  Mahoney  explains. 

The  DxCG  model  proved  prescient:  First- 
quarter  2003  health-care  costs  in  the  New 
York  area  were  30  percent  to  40  percent  over 
2002  costs.  But  thanks  to  the  education 
initiative,  health  screenings  went  up,  ER 
usage  was  down  and  overall  annual  costs 
came  in  at  just  1  percent  above  2002  costs. 

When  Pitney  Bowes’  contract  with  its  New 
York  area  health-care  vendor  came  up  for  bid 
for  2004,  Mahoney  and  Horn  looked  for 
a  more  proactive  provider.  “We  needed  a 
health  plan  to  reach  out  to  people,  to  help 
engage  them  before  they  become  high-cost 
claimants,”  says  Mahoney.  Today,  employees 


A  Premium  on  Health  Privacy 

Pitney  Bowes  outsourced  its  predictive-modeling  project 
to  protect  data  confidentiality 

WHEN  PITNEY  BOWES  embarked  on  its  predictive-modeling  project,  corporate 
privacy  policies  as  well  as  federal  regulations  led  executives  to  conclude  that  the  IT 
department  would  have  to  be  hands  off.  Global  Health-Care  Management  Director 
Jack  Mahoney  and  David  Horn,  vice  president  for  employment  brand  total  rewards, 
decided  that  they  had  to  outsource  the  entire  effort. 

Pitney  Bowes  employees  are  prohibited  from  viewing  any  health  information  linked 
to  individuals,  aside  from  their  own  personal  information.  The  rules  are  designed  so 
that  a  manager  can't,  for  example,  deny  a  promotion  to  an  employee  because  he  has 
a  heart  condition.  Therefore  Pitney  Bowes  can  only  view  its  health-care  claims  data 
in  aggregate. 

Because  no  one  in  the  IT  department  can  have  access  to  individual  employee  health 
data,  Pitney  Bowes  has  a  long-term  contract  with  Medstat,  a  third-party  data  warehouse 
provider,  to  collect  all  of  its  health-care  claims  and  pharmacy  data— as  well  as  workers’ 
comp,  clinic,  behavioral  and  disability  data. 

For  the  predictive-modeling  projects,  Medstat  normalizes  the  data  and  strips  it  of  all 
identifiers  such  as  names  and  addresses.  The  data  is  then  encrypted  so  that  it  can't  be 
traced  back  to  an  individual  employee.  The  Pitney  Bowes  IT  department’s  role  is  limited 
to  enabling  monthly  data  feeds  from  Pitney  Bowes’  HR  systems  to  Medstat.  As  for  making 
aggregate  Medstat  data  available  to  the  desktops  of  the  Pitney  Bowes  employees  who 
need  it,  all  IT  had  to  do  was  optimize  their  browsers.  -A.D. 


who  sign  up  for  the  new  plan  get  a  call  from  a 
nurse  whose  goal  is  to  identify  the  family’s 
health  problems  and  offer  resources  to  get 
them  under  control. 

TREATMENT: 

Incentives  to  Stay  Healthy 

While  DxCG  was  focusing  on  projecting  costs 
by  region,  Medical  Scientists  was  developing 
a  model  of  a  high-cost  claimant — someone 
who  costs  the  company  $  1 0,000  or  more  per 
year  in  medical  claims,  workers’  compensation, 
disability  and  absenteeism.  The  software  uses 
several  types  of  artificial  intelligence,  including 
neural  net  technology,  to  identify  patterns 
among  claimants  that  might  otherwise  be 
impossible  to  spot. 

“Everyone  has  a  theory  of  what  drives  future 
costs:  smokers,  people  who  don’t  eat  right, 
lack  of  immunizations,”  says  Mahoney.  Those 
theories  tend  to  color  people’s  interpretations 
of  the  data,  he  explains.  He  sees  artificial  intel¬ 
ligence  as  a  fresh  set  of  eyes,  unencumbered 


by  preconceived  notions. 

Pitney  Bowes  gave  Medical  Scientists  data 
on  medical,  disability  and  pharmacy  claims; 
encounter  data  from  its  seven  onsite  clinics; 
and  employee  data — such  as  age,  gender,  ZIP 
code  and  salary  level.  The  engine  then  searched 
for  the  combination  of  variables  most  likely  to 
cause  a  person  to  rack  up  high  expenses. 

The  analysis  produced  two  findings.  First, 
employees  who  spent  more  than  $780  on 
health  care  were  most  likely  to  become  high- 
cost  claimants  the  next  year,  as  were  those  who 
spent  nothing  because  they  weren’t  getting 
checkups.  Second,  employees  with  asthma, 
diabetes,  depression  or  hypertension  who 
weren’t  taking  their  medicine  regularly  were 
also  at  risk  for  becoming  big  spenders. 

Horn  and  Mahoney  convened  a  group  of 
experts — including  the  chief  medical  officers 
of  a  pharmaceutical  company  and  a  health 
insurance  plan — to  review  the  findings.  After 
validating  the  data,  the  group  brainstormed 
ways  to  reduce  expenses.  Mahoney  and  Horn 
prioritized  the  ideas  and  launched  sweeping 
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Predictive  Modeling 


changes  to  Pitney  Bowes'  health  plans. 

First,  they  redesigned  the  plans  to  place 
greater  emphasis  on  preventive  care.  Now, 
employees  can  get  colonoscopies,  mammo¬ 
grams  and  immunizations  for  free  or  for  a 
minimal  copay.  To  get  employees  with  com¬ 
mon  chronic  illnesses  to  take  their  meds, 
Mahoney  and  Horn  took  an  even  more  radi¬ 
cal  course  of  action:  They  did  away  with  the 
three-tiered  pricing  structure  for  drugs  used 
to  treat  asthma,  diabetes  and  hypertension. 
Instead  of  making  employees  kick  in  up  to  half 
the  cost  for  brand-name  drugs,  Pitney  Bowes 
would  provide  all  asthma,  diabetes  and  hyper¬ 
tension  drugs  at  the  generic  rate  of  1 0  percent. 
Overall,  employees’  out-of-pocket  costs  for 
those  medications  were  cut  nearly  in  half. 

Mahoney  had  to  convince  skeptics  that 
the  likely  long-term  savings  from  more  faith¬ 
ful  medication  usage  justified  the  expense. 
Pitney  Bowes  would  be  footing  a  much  heftier 
portion  of  employees’  drug  bills  at  a  time  when 
consultants  were  forecasting  a  22  percent  to 
24  percent  increase  in  drug  costs.  And  it  would 
also  forfeit  the  rebates  that  pharmaceutical 


Four  Prescriptions 
for  Predictive- 
Modeling  Success 

1.  DEFINE  THE  ISSUE.  Know  what  you 
want  to  find  out— and  stick  to  it.  Avoid 
the  temptations  of  scope  creep. 

2.  TRUST  THE  DATA.  The  results  might 
surprise  you.  Don’t  let  your  pet  theories 
cloud  your  interpretation  of  the  findings. 

3.  DO  SOMETHING.  ROI  comes  not  from 
the  findings,  but  from  how  you  apply  them. 
“Have  a  process  for  using  the  model’s 
results,”  says  Gartner’s  Cynthia  Burghard. 

4.  MEASURE  THE  RESULTS.  You  won’t 
know  the  ROI  if  you  don’t  define  good 
business  metrics. 


12  percent.  Mahoney  reports  heaving  a  huge 
sigh  of  relief  when  he  realized  that  reality  bore 
out  the  Medical  Scientists  model’s  prediction. 
He  attributes  the  lower  costs  to  people  refilling 
their  prescriptions  more  faithfully,  and  taking 
“control”  drugs  that  prevent  problems  (and 


take  these  drugs  and  high  costs. 

As  it  turns  out,  lowering  the  cost  of  hyper¬ 
tension  drugs  did  not  increase  compliance  or 
lower  treatment  costs.  “What’s  true  for  asthma 
and  diabetes  may  not  be  true  for  hypertension,” 
says  Mahoney.  Predictive  modeling  “is  going 
to  be  the  key  to  helping  us  understand  all  that.” 

Gartner’s  Burghard  says  that  predictive 
modeling  has  been  used  for  years  by  insurance 
companies  to  set  rates.  But  calculating  the 
probability  that  someone  will  live  X  number 
of  years  to  determine  his  life  insurance  pre¬ 
mium  is  easier  than  figuring  out  what  causes 
health-care  costs  to  increase  and  how  best  to 
control  them.  Merely  investing  in  predictive 
modeling  won’t  yield  a  return — just  a  projec¬ 
tion  that,  say,  costs  will  increase  by  a  certain 
percentage.  “The  return  comes  when  you  fig¬ 
ure  out  why  and  what  you’re  going  to  do 
a  bout  it — and  then  only  if  what  you  do  about 
it  makes  a  difference,”  Burghard  explains. 

Given  Pitney  Bowes’  success  at  reining  in 
health-care  costs,  Horn  is  launching  a  predictive- 
modeling  project  outside  the  realm  of  health 
benefits.  This  time,  the  company  will  use  the 


David  Horn,  a  Pitney  Bowes  vice  president,  wants  to  use  predictive 
modeling  to  identify  which  employee  benefits  correlate  with  profitability. 


companies  offer  for 
giving  their  drugs 
preferred  status. 
Pitney  Bowes  was  potentially  adding  close 
to  a  million  dollars  to  its  pharmacy  bill. 

After  phasing  in  the  price  cuts  over  two 
years,  all  that  Mahoney  and  Horn  could  do 
was  wait  to  see  if  the  model  was  right.  As  they 
waited,  they  kept  a  close  eye  on  Pitney  Bowes’ 
pharmacy  costs.  “We  didn’t  see  the  huge  spike 
in  pharmacy  costs  that  would  have  been  the 
indicator  of  failure,”  says  Mahoney. 

PROGNOSIS: 

Cautious  Optimism 

Their  patience  was  rewarded  this  year  with 
good  news:  The  median  cost  of  care  for 
employees  with  asthma  decreased  1 5  percent 
in  2002,  while  costs  for  diabetes  patients  fell 


costly  hospitalizations)  instead  of  more  expen¬ 
sive  “rescue”  drugs.  Mahoney  says  that  the 
rate  for  patients  obtaining  control  drugs  is  up 
approximately  20  percent.  In  the  case  of 
asthma  and  diabetes  drugs,  Mahoney  reports 
that  Pitney  Bowes’  prescription  costs  are  actu¬ 
ally  down  about  10  percent  after  18  months 
because  patients  need  fewer  additional  med¬ 
ications  to  treat  emergencies  or  side  effects.  “In 
your  wildest  dreams,  [lowering  drug  prices] 
is  not  first  thing  you’d  do,”  says  Mahoney. 
“But  this  turned  out  to  be  appropriate.” 

One  reason  that  Pitney  Bowes  achieved  such 
promising  results  is  that  Mahoney  and  Horn 
didn’t  second-guess  the  data  from  Medical 
Scientists  and  resisted  the  temptation  to  lower 
prices  willy  nilly.  Statin  drugs,  for  instance,  are 
very  effective  at  lowering  cholesterol,  but  their 
prices  were  not  reduced  because  the  model 
found  no  link  between  patients  failing  to 


technology  to  comb  through  data  on  the 
company’s  benefit  options  (such  as  40 1  (k)  plans 
and  insurance  elections),  customer  satisfaction 
scores,  employee  survey  results  and  individuals’ 
performance  ratings.  The  goal  is  to  identify 
the  benefits  that  are  most  closely  correlated 
with  profitability  and  external  customer  sat¬ 
isfaction.  “It’s  kind  of  Star  Wars  stuff,”  says 
Catherine  McCabe,  a  health-care  consultant 
with  Mercer  Human  Resource  Consulting. 

Pitney  Bowes  is  well-equipped  to  venture 
into  Star  Wars  territory  because  it  undertakes 
new  predictive-modeling  projects  with  a  clear 
understanding  that  they’ll  be  long-haul 
propositions.  “Patience  is  a  big  virtue,”  says 
Mahoney.  “You  have  to  be  able  to  stay  with 
something  long  enough  to  see  results.”  BEI 


Send  feedback  to  Senior  Editor  Alice  Dragoon  at 
adragoon@cio.  com . 
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Now  you  can't  say  you  haven't  heard  of  us 


Now 


that  you've  heard  of  us,  here  are  six  good  reasons  why  you  should  care: 


•  Equant  is  the  proven  industry  leader  in  global  business  communication  solutions  for  multinational 
companies. 

•  Supporting  you  with  people  and  expertise  in  165  countries,  wherever  you  do  business. 

•  A  single,  seamless  network  in  220  countries  and  territories. 

•  Saving  you  time  and  money,  improving  end-user  and  customer  satisfaction,  delivering  solutions 
tailored  to  your  business  processes. 

•  Offering  you  a  complete  range  of  global  communication  solutions,  addressing  your  urgent  issues: 
Compliance,  Security,  Applications  Performance,  Vendor  Management,  IP  Telephony. 

•  Enabling  your  global  communications  to  run  smoothly  so  you  can  focus  on  your  company's  core 
business. 


To  discover  how  Equant's  solutions  can  enhance  your  business  visit  our  website  now: 
www.equant.com/usa  or  meet  us  at  the  CIO  100  Symposium,  August  22  -  24,  and  learn  how 
Microsoft  uses  Equant  for  global  solutions  involving  its  mission  critical  revenue-generating  networks. 


.Cequant 


When  you  want  to  transform 

your  global  communications,  we'll  be  with  you 
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Cleaning  dirty  data  is  not  just  a  matter  of  mastering  the  technical  challenges. 


PHOTOS  BY  AP/WIDE  WORLD  PHOTOS 


In  the  early  hours  of  March  20, 2003  ,  British  soldiers,  sailors  and  airmen  joined  U.S. 

forces  in  the  invasion  of  Iraq  and  the  toppling  of  Saddam  Hussein.  Thus  far,  they  have  played  a  vital 
role  in  rebuilding  Basra  and  the  critical  Persian  Gulf  port  of  Umm  Qasr.  Massive  shipments  of  mili¬ 
tary  materiel  were  essential  to  their  success,  and  basically,  anything  that  wasn't  a  vehicle,  live 
ammunition  or  fresh  provisions  (which  have  different  supply  lines)  began  its  journey  to  the  Gulf  from 
England’s  military  warehouses.  In  the  few  weeks  prior  to  the  invasion  of  Iraq,  these  depots  sent  by 
ship  or  air  3,169  20-foot  shipping  containers  to  the  Gulf,  along  with  almost  22,000  3-foot  pallets. 

Getting  these  shipments  to  the  Gulf  was  a  logistical  nightmare  that  would  have  been  far  more 
fraught  had  the  British  defense  ministry  not  embarked  four  years  ago  on  a  $10.8  million  effort  to 
pull  together  three  separate  supply  chains:  This  involved  reconciling  some  850  different  infor¬ 
mation  systems,  and  integrating  three  inventory  management  systems  and  15  remote  systems. 

The  biggest  foe  in  this  massive  integration  effort  was  not  Saddam  Hussein,  but  dirty  or  disparate 
data.  To  one  system,  stock  number  99  000 1111  was  a  24-hour, 
cold-climate  ration  pack.  To  another  system,  the  same  num¬ 
ber  referred  to  an  electronic  radio  valve.  And  if  hungry  troops 
were  sent  radio  valves  instead  of  rations,  the  invasion  and 
rebuilding  of  Iraq  wouldn’t  have  gone  very  far. 

Dirty  data  has  long  been  a  CIO’s  bugbear.  But  in  today’s 
wired  world,  the  costs  and  consequences  of  inaccurate  infor¬ 
mation  are  rising  exponentially.  Muddled  mailing  lists  are 
one  thing,  missing  military  materiel  quite  another.  Throw  in 
the  complications  arising  from  merging  different  data  sets,  as  in  the  aftermath  of  a  merger  or  acqui¬ 
sition,  and  the  difficulties  of  data  cleansing  multiply.  For  this  article,  we  interviewed  seasoned  data- 
cleaning  veterans  from  organizations  as  diverse  as  the  British  Ministry  of  Defence,  the  U.S.  Census 
Bureau  and  Cendant,  a  real  estate  and  hospitality  conglomerate.  But  the  lessons  learned  contain 
two  common  themes:  How  to  surmount  the  technical  challenges  of  cleaning  data,  and  how  to  align 
IT  staff  with  the  business  side  to  ensure  that  the  task  gets  done  right. 

Know  Your  Enemy 

When  Britain’s  defense  department  began  its  data-cleaning  project  in  early  2000,  it 
faced  a  huge  task,  says  Lt.  Col.  Andrew  Law,  head  of  The  Cleansing  Project.  (It  just  so 
happens  that  the  acronym  TCP  is  also  a  well-known  British  brand  of  antiseptic.)  The 
department’s  IT  team  was  using  three  main  systems  to  sort  through  1.7  million  records,  which 
each  had  literally  hundreds  of  attributes.  Each  record  referred  to  an  item  that  troops  might  require, 
and  many  of  these  items  were  to  be  dispatched  from  the  ministry’s  widely  dispersed  warehouses 
in  Bicester,  England,  and  other  locations.  (The  Bicester  warehouses  are  far  apart  because  they 
were  built  in  1942  with  the  idea  to  make  it  hard  for  German  bombers  to  deliver  a  knockout  punch.) 


Reader  ROI 

►  How  clean  data  kept  British  troops 
supplied  during  the  invasion  of  Iraq 

►  Why  successful  cleansing  relies  on 
more  than  just  technology 

►  How  one  data-cleaning  project 
made  customers  more  loyal 


Shortly  after  the  invasion  of  Iraq,  British 
soldiers  distribute  badly  needed  aid  and  food 
packages  to  Iraqis  near  Basra  and  other 
towns  in  southern  Iraq.  In  the  bottom  photo,  a 
soldier  unloads  crates  of  food  and  essential 
items  sent  from  the  United  Kingdom  for 
British  troops  located  in  and  around  Basra. 


Data  Quality 


Law’s  mission  was  to  review  all  the  data,  but  he 
had  to  concentrate  his  team’s  energies  on  clean¬ 
ing  six  critical  data  fields:  the  NAT O  item  iden¬ 
tifier,  the  NAT  O  supply  classification,  the  unit  of 
issue,  the  suppl  ier  code,  the  packaging  code  and 
the  hazard  code.  These  six  fields  were  chosen 
based  on  which  ones  would  have  the  biggest 
impact  on  the  supply  chain  if  they  were  wrong. 

“The  first  step  was  to  identify  homonyms 
and  synonyms,”  says  Paul  Nettle,  manager  of 
data  cleaning  for  TCP.  Homonyms,  he  explains, 
are  two  or  more  different  items  with  the  same 
identifier,  such  as  rations  and  radio  valves.  Syn¬ 
onyms  are  the  same  items  with  more  than  one 
identifier — the  same  radio  valve  kept  in  two 
places  in  a  warehouse  under  two  different  num¬ 
bers,  for  example. 

“Synonyms  are  merely  inefficient,”  Nettle 
observes.  Overstocking  and  overbuying  result 
from  such  data  mistakes,  rather  than  troops 
being  shipped  the  wrong  gear. 


Four  Ways  to  Make 
Your  Data  Sparkle 

1  Prioritize  the  task.  Cleaning  data  can 
be  costly  and  time-consuming,  so  your 
first  step  should  be  figuring  out  which  data 
is  mission-critical  and  which  isn’t.  For  some 
companies,  it's  not  worth  cleaning  data 
errors  like  sloppy  punctuation  when  they 
don’t  get  in  the  way  of  business  objectives. 

Involve  the  data  owners.  Ask  the 

business  units  that  own  the  data  for 
help  defining  precise  rules  for  what  con¬ 
stitutes  dirty  data.  That  includes  figuring 
out  in  advance  whether  98  percent  clean 
is  good  enough,  or  whether  100  percent 
is  required  or  affordable. 

3  Keep  future  data  clean.  Put  processes 
and  technologies  in  place  that  check 
every  zip  code  and  every  area  code. 

Align  your  staff  with  business.  Make 
sure  you  have  IT  people  working  on  the 
ground  with  business  units  to  make  neces¬ 
sary  changes  in  the  data  and  relabel 
wrongly  tagged  inventory.  -M.W. 


Next,  the  IT  team  employed  data-profiling 
software  to  crawl  though  the  data,  checking  it 
for  valid  NATO  numbers.  The  troubling  find¬ 
ing:  119,000  numbers  (about  one  in  10) 
weren’t  valid.  The  radio  valve,  it  turned  out, 
was  a  valid  NATO  part  number,  but  the  rations 
came  from  a  satellite  system  where  nonstan¬ 
dard  rules  had  been  used.  Every  one  of  them 
had  to  be  sent  to  a  NAT O  office  in  Glasgow  for 
codification,  and  then  corrected  in  each  system 
in  which  it  occurred.  Nettle  and  his  team  also 
discovered  they  had  quite  a  bit  of  relabeling  to 
do  at  the  depot,  since  much  of  the  inventory  sit¬ 
ting  on  the  shelves  was  now  incorrectly  labeled. 

The  next  step  was  “fuzzy  matching,”  using 
software  to  look  for  duplicates  and  errors 
introduced  by  keyboard  entry.  “The  ability  to 
ignore  [minor  mistakes  in]  punctuation  and 
figure  out  when  a  3  had  been  erroneously  sub¬ 
stituted  for  an  8  was  important  when  dealing,” 
Nettle  says.  Such  numerical  errors,  after  all, 
could  change  the  entire  meaning  of  the  text, 
while  punctuation  mistakes  merely  provided 
Nettle’s  team  with  much  needed  amusement. 

By  August  2001,  they  had  completed  the  rel¬ 
atively  easy  (if  time-consuming)  task  of  exam¬ 
ining  item  identifiers  to  see,  for  instance,  if  an 
item  held  the  valid  NATO  number.  Now  they 


had  to  find  a  way  to  correct  the  other  data  fields. 
Here,  the  challenge  was  more  difficult.  For  things 
such  as  unit-of-issue  labels,  packaging  codes  and 
supplier  details,  hard  and  fast  rules  to  tell  clean 
data  from  dirty  data  didn’t  exist.  For  example, 
supplies  of  aircraft  oil:  A  military  unit  in  the  Gulf 
might  order  250  liters  of  oil,  expecting  250  one- 
liter  cans — only  to  receive  250  separate 250-liter 
drums  of  the  stuff.  The  reason?  On  the  Royal 
Air  Force  system  responsible  for  ordering  the  oil, 
250-liter  drums,  not  one-liter  cans,  were  the  unit 
of  issue.  Neither  label  was  technically  an  error, 
but  clearly,  such  inconsistencies  could  quickly 
cripple  a  supply  chain.  To  make  sure  such  a  dis¬ 
aster  would  never  occur,  the  TCP  team  turned 
to  a  data-profiling  tool,  which  highlighted  errors 
and  inconsistencies  in  the  various  codes.  The 
software  provides  easy-to-understand,  com¬ 
puter-generated  diagrams  to  spot  unusual  data 
formats  that  could  be  erroneous. 

As  Faw  points  out,  however,  technology 
only  goes  so  far.  The  1 2-man  TCP  project  suc¬ 
ceeded  in  large  part  because  team  members  at 
headquarters  worked  closely  with  members 
in  the  British  Army,  Royal  Navy  and  Royal 
Air  Force,  who  made  sure  flawed  data  actu¬ 
ally  did  get  cleaned  and  organized  activities 
such  as  relabeling  inventory  on  the  shelf.  So 
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far,  Nettle  says,  the  cleansing  project  has  cost 
$  1 1  million  over  four  years,  and  has  saved  the 
Ministry  of  Defence  $36  million. 

Define  the  Rules  in  Advance 

hile  the  British  defense  ministry  is  still 
cleaning  up  its  data  warehouses  to 
generate  a  more  consistent  view  of 
military  supply  items,  commercial  companies 
are  employing  much  the  same  technology  to 
develop  an  enterprisewide  view  of  their  cus¬ 
tomers.  In  some  cases,  the  demand  for  consis¬ 
tently  clean  data  comes  from  the  customers 
themselves,  who  want  to  see  how  their  business 
is  performing  in  real-time.  For  example,  in  these 
economically  constrained  times,  the  corporate 
customers  at  Carlson  Wagonlit  Travel,  one  of 
the  largest  travel  agencies  in  the  world,  are  eager 
for  good  quality  data  on  exactly  how  their  travel 
and  expenses  budgets  are  being  spent.  Indeed, 
building  a  data  warehouse  that  can  deliver  such 
information  has  become  a  competitive  differ¬ 
entiator  in  the  industry,  says  Jay  Vetsch,  senior 
director  of  information  delivery  at  Carlson. 

The  task  for  Vetsch  and  his  team  was  daunt¬ 
ing.  With  annual  sales  of  $  1 0.5  billion  and  oper¬ 
ations  spread  over  140  countries,  the  agency  has 
high  data  volumes:  14  million  airline  tickets  per 
year,  12  million  hotel  nights  booked  every  year 
and  so  on.  While  the  raw  number  of  transac¬ 
tions  per  day  (around  60,000)  is  doable,  each 
record  often  equates  to  a  trip  with  several  flights, 
hotels  and  rental  car  reservations.  Thus,  the 
record  size  is  massive,  around  400  fields. 

Worse,  the  data  must  be  extracted  from  a 
number  of  different  back-office  systems  spread 
across  the  business.  What’s  more,  the  data  is 
subject  to  the  inputting  vagaries  of  the  front- 
office  operators  in  those  140  countries — not 
just  human  vagaries,  but  also  differences  in 
legal,  tax  and  accounting  regulations.  And 
from  the  point  of  view  of  the  people  generating 
the  data,  Vetsch’s  task  is  not  mission-critical. 

“You  have  to  remember  that  the  informa¬ 
tion  is  being  generated  for  the  purpose  of  get¬ 
ting  a  traveler  a  ticket — not  for  an  MIS  system 
to  provide  reports  to  clients,”  he  says. 

As  a  result,  the  data  can  contain  errors — an 
invalid  supplier  code,  client  code  or  a  fare  dis¬ 
crepancy — not  major  enough  to  prevent  a  ticket 


from  being  issued,  but  flawed  enough  to  foul 
up  an  analysis.  Vetsch  relies  on  software  that 
acts  as  a  gate  guardian  to  the  data  warehouse.  If 
a  record  meets  defined  data  quality  criteria,  it’s 
allowed  to  proceed.  If  it  doesn’t,  it’s  kicked  back 
to  the  originating  office  for  correction. 

Data  from  Europe,  where  the  company  has 
offices  in  most  countries,  is  already  being  used 
on  a  limited  basis  to  generate  client  reports. 
Company  agents  in  North  America  and  the 
remainder  of  the  countries  in  which  Carlson  has 
offices  should  be  able  to  generate  such  repoits 
by  early  2005.  Vetsch  declined  to  disclose  the 
projected  ROI  for  the  cleansing  effort.  However, 
if  good  quality  client  reports  have  become  the 
price  of  getting  corporate  business,  then  it’s  a 
bold  manager  who’d  argue  that  the  investment 
was  nothing  other  than  the  price  of  survival. 

Buy-In  from  Owners  of  the  Data 

Similar  to  Carlson,  Cendant — owner  of 
car  rental  company  Avis  and  realtor 
Century  2 1  as  well  as  hotel  chains  Days 
Inn,  Howard  Johnson,  Ramada  and  Trav- 
elodge — would  love  a  single,  enterprisewide 
view  of  all  its  customers.  But  five  years’  work 


on  building  a  data  warehouse  delivered  virtu¬ 
ally  nothing.  That’s  because  no  one  was  using 
it.  By  now  you  can  guess  the  culprit:  dirty  data. 

“Basically,  the  data  warehouse  was  being 
used  for  list  generation  by  two  people  in  mar¬ 
keting,”  says  Vincent  Kellett,  senior  director  of 
data  services  who  was  hired  in  2002  to  see  if  the 
project  could  be  revived.  “Because  of  data  qual¬ 
ity  issues,  the  project  was  dying  on  the  vine.” 

To  make  the  system  viable,  Kellett  realized 
the  company  would  have  to  throw  out  a  bunch 
of  hard-to-maintain  custom  code,  spend  money 
on  cleaning  up  some  truly  horrible  data  and 
institute  formal  processes  for  data  mainte¬ 
nance.  Even  basic  procedures  such  as  subscrib¬ 
ing  to  the  national  change-of-address  database 
maintained  by  the  U.S.  Postal  Service  had  been 
overlooked  by  the  project  team.  “They’d  been 
so  mired  down  in  day-to-day  problems  that  they 
just  hadn’t  gotten  ’round  to  it,”  he  says. 

Data-cleaning  software  from  Trillium  Soft¬ 
ware  was  pressed  into  service.  The  database 
originally  contained  132  million  records,  a 
number  that  was  eventually  boiled  down  to  90 
million  “that  at  least  had  a  name  and  a  street 
address,”  Kellett  says.  At  each  cycle  of  the 


JAY  VETSCH,  senior  director  of 
information  delivery  at  Carlson 
Wagonlit  Travel,  relied  on  software 
to  pick  up  defects  in  data  being  routed 
to  his  company’s  data  warehouses. 
Data  is  then  used  to  compile  real-time 
reports  for  customers  on  how  their 
travel  business  is  doing. 
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Data  Quality 


data-cleaning  process,  his  ream  formulated 
new  rules,  which  were  then  subjected  to  a  trial 
experiment  to  both  detect  duplicates  and  cor¬ 
rect  them.  Further  winnowing,  by  matching 
against  the  latest  information  on  address 
changes,  eventually  reduced  the  number  to 
closer  to  80  million  cleaned  records  that  were 
loaded  into  the  data  warehouse. 

When  a  customer  checks  into  a  hotel  or 
picks  up  a  rental  car  and  a  new  record  is  cre¬ 
ated,  the  system  asks:  Do  we  know  this  per¬ 
son?  If  so,  load  any  new  information — such 
as  change  of  address  or  phone  number — and 
then  update  their  transaction  data  with 
another  stay  or  car  rental.  And  that  informa¬ 
tion  is  automatically  integrated  with  the  rest  of 
the  customer  database. 

Key  to  the  project’s  completion  was  a  deci¬ 
sion  to  closely  involve  the  business  owners  of 
the  data  (in  this  case,  the  marketing  depart¬ 
ment)  in  developing  the  data-cleaning  stan¬ 
dards.  “I’d  advise  [anyone  working  on  data 
quality]  to  work  closely  with  the  business  users 
to  define  the  matching  rule,”  Kellett  says. 
“What  constitutes  a  match?  Last  name,  or  last 
name  and  first  name?  Or  these,  plus  a  matching 
credit  card?  And  when  a  duplicate  is  detected, 
what  rules  determine  which  record  will  be  the 
survivor  record?  For  instance,  is  Bob  Smith  the 
same  as  Robert  Smith?  And  is  the  new  address 
revealed  by  a  car  rental  due  to  a  house  move, 
or  the  acquisition  of  a  summer  cottage?  Or  just 
the  wrong  address  completely?” 

The  turnaround  in  the  project’s  fortunes 
has  been  so  complete,  Kellett  says,  that  Cen¬ 
dant  has  been  able  to  launch  a  loyalty  pro¬ 
gram  across  nine  of  its  chains — including 
Days  Inn,  Howard  Johnson,  Ramada,  Super 
8  Motel  and  Travelodge.  Customers  can  now 
collect  points  (much  like  frequent  flier  miles) 
every  time  they  stay  in  a  Cendant  hotel.  Such 
a  program  would  have  been  impossible  with¬ 
out  the  single  customer  view  that  the  cleaned- 
up  data  warehouse  provides. 

Editing  Out  Inaccuracies 

Even  better  than  cleaning  dirty  data  is 
making  sure  it  can’t  be  soiled  in  the  first 
place.  Organizations  heavily  reliant  on 
accurate  information,  such  as  the  U.S.  Census 
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RICHARD  SWARTZ,  CIO  of  the 
U.S.  Census  Bureau,  has  built 
a  series  of  feedback  loops  into 
its  surveys  in  order  to  make  sure 
human-generated  information 
is  as  accurate  as  possible. 


Bureau,  are  leading  the  charge  when  it  comes 
to  building  real-time  validation  into  data  as  it 
is  generated.  The  Bureau  undertakes  hundreds 
of  surveys  a  year  into  demographics,  the  econ¬ 
omy,  trade  data  and  much  else.  And  needless 
to  say,  clean  data  is  imperative. 

To  facilitate  its  work,  the  Bureau  has  devel¬ 
oped  an  approach  of  building  feedback  and 
validation  loops  into  each  survey  and  ques¬ 
tionnaire  in  order  to  make  sure  that  human¬ 
generated  information  is  as  accurate  and 
reasonable  as  possible,  says  Richard  Swartz, 
associate  director  for  IT  and  CIO  at  the  Cen¬ 
sus  Bureau.  Whenever  the  completed  ques¬ 
tionnaires  are  returned  from  businesses  and 
individuals,  and  scanned  into  the  Bureau’s 
computers,  checks  called  “edits”  take  place 
that  test  the  responses  to  make  sure  they  are 
complete  and  reasonable,  Swartz  explains. 
Are  the  required  fields  complete?  If  not,  how 
should  nonresponses  be  dealt  with?;  should 
records  be  ignored,  or  should  responses  be 
“created”  by  estimating  or  putting  in  an  aver¬ 
age  value  so  as  to  avoid  throwing  out  a  whole 
record  just  because  of  one  odd  or  missing  data 
item?  Are  responses  reasonable?  Can  a  96- 
year-old  describe  herself  as  unemployed,  and 
is  that  80-year-old  man  really  the  father  of  a 
new  baby?  Is  data  consistent?  Could  a  com¬ 


pany  with  three  people  on  the  payroll  really 
have  a  salary  bill  of  more  than  $  1  million? 

At  the  U.S.  Centers  for  Disease  Control  and 
Prevention,  such  real-time  data  validation  un¬ 
derpins  data  gathering,  according  to  CIO  Jim 
Seligman.  When  laptop- wielding  field  workers 
quiz  40,000  U.S.  households  a  year  for  the 
“National  Health  Interview  Survey,”  automatic 
edits  make  sure  that  responses  are  as  complete 
as  possible  while  the  survey  is  taking  place. 
Some  edits  are  “skip  patterns, ’’designed  to  pre¬ 
vent  erroneous  questions  from  being  asked  in 
the  first  place.  If  the  respondent  is  male,  for 
example,  he  won’t  get  the  question  about  mam¬ 
mographies.  Other  edits  are  consistency  checks: 
Respondents  are  asked  their  age,  but  also  their 
date  of  birth — and  the  two  are  compared. 

It  may  sound  trivial,  but  from  such  small 
foundations,  clean  data  is  built.  “Any  time  a 
human  being  has  something  to  do  with  entering 
data,  there’s  the  potential  for  error — whether 
it’s  misreading  something,  misinterpreting 
something  or  miskeying  something,”  Seligman 
says.  And  very  often,  it  takes  humans  working 
with  machines  to  clean  up  the  mess.  BE] 


Malcolm  Wheatley  is  a  freelance  writer  living  in  Devon, 
England.  E-mail  Executive  Editor  Alison  Bass  at 
abass@cio.com  with  your  comments. 
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You  did  everything  right,  but... 


If  your  IT  spending  isn't  aligned  with  the  business  strategy, 

you've  failed  the  company. 


Your  job  has  moved  beyond  just  technology — you 
need  to  embrace  your  company's  overall  business 
objectives.  Primavera  can  help.  For  20  years,  we've 
been  working  toward  the  ultimate  project  portfolio 
management  solution. 

Our  software  helps  you  prioritize  your  entire  project 
portfolio,  so  you  can  optimize  people,  projects,  and 
processes  to  stay  focused  on  business  goals. 


We  saved  a  Fortune  1 00  company  $1  5  million 
in  nine  months.  How  much  can  we  save  you? 

To  estimate  your  company's  potential  savings  with 
our  convenient  online  ROI  Calculator,  visit: 

www.primavera.com/ppm 
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Dream  On 

AS  PLANNING  BEGINS  FOR  THE  2005  BUDGET  CYCLE,  I  encour¬ 
age  CIOs  to  follow  a  few  words  of  advice  from  Walt  Disney, 
who  once  said  to  his  management  staff,  “If  you  can  dream  it, 
you  can  do  it.” 

Over  the  past  few  years,  many  CIOs  have  developed  budgets 
based  on  a  very  different  sentiment.  Namely,  “If  you  can  meas¬ 
ure  it,  you  can  do  it.”  Often,  CIOs  don’t  have  a  lot  of  time  in 
which  to  carry  out  their  mandates.  Typically,  they  have  90  days 
or  less  to  evaluate  measurement  or  ROI. 

In  five  years,  we  have  gone  from  ambitious  and  strategic  IT 
projects  to  IT  projects  that  focus  on  short-term  results.  CIOs  of 
the  late  ’90s  were  (if  anything)  great  dreamers.  Followers,  if  you 
will,  of  Walt  Disney’s  advice.  Granted,  many  of  their  IT  dream 
projects  turned  into  infrastructure  nightmares,  but  let’s  give  CIOs 
credit  for  thinking  about  the  art  of  the  possible.  And  let’s  face  it: 
Without  taking  risks,  CIOs  can  forget  about  being  strategic, 
influential  leaders  at  their  organizations. 


The  results  of  a  recent  CIO  Magazine  Tech  Poll  suggest  that 
the  current  focus  on  investing  in  short-term,  nonstrategic  IT 
projects  is  resulting  in  infrastructures  that  one  CIO  calls  “brit¬ 
tle.”  The  poll  indicates  strong  investment  trends  into  2005  for 
data  networking,  telecommunications  and  infrastructure  soft¬ 
ware  projects — just  the  kinds  of  projects  that  have  been  neg¬ 
lected  since  the  first  quarter  of  2001. 

So  as  you  ramp  up  your  2005  budget  process,  follow  Disney’s 
advice  by  dreaming  about  how  IT  can  affect  your  business. 

Dream  about  how  technology  can  transform  your  organi¬ 
zation,  leading  to  higher  net  income  and  improved  customer 
satisfaction.  Dream  about  how  IT  can  help  you  enable  business 
growth  at  your  company  while  lowering  costs.  Dream  about 
ways  IT  can  drive  improved  productivity. 

There’s  a  real  benefit  to  dreaming  big.  In  2005  and  beyond, 
companies  that  have  CIOs  who  dream  will  outperform  compa¬ 
nies  whose  CIOs  remain  asleep  at  the  myopic  ROI  wheel. 
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AVAyA 

a  higher  plane 
of  communication 


WHEN  TAKING  YOUR  COMPANY  on  the  IP  telephony 

road,  the  right  traveling  companion  is  essential. 

Avaya  Global  Services  will  not  only  get  you 

going  in  the  right  direction,  but  we’ll  guide 

you  the  whole  way.  For  starters,  we  develop  a 

comprehensive  network  plan  that  includes  a 

multivendor,  multitechnology  IP  readiness 

assessment.  This  tells  us  what  we  need  to  know 

to  help  you  avoid  surprises  during  implementation 

and  maximize  security.  We’ll  get  you  up  and 

running  easily  and  seamlessly.  And  you  can 

continue  to  count  on  Avaya  Global  Services  to 

manage  and  constantly  monitor  your  entire 

network,  using  EXPERT  Systems™  Diagnostic 

Tools,  for  example,  that  remotely  resolve  96% 

of  all  system  alarms*  Go  with  Avaya,  and  your 

competitors  will  be  eating  your  dust.  Visit 

www.avaya.com/sidecar  or  call  866-GO  AVAYA. 
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Contact  Centers 

Unified  Communication 

Services 

With 

AVAYA  GLOBAL  SERVICES 


at  your  side,  migration  to  IP  telephony  can  be  a 
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Take  Back  Enterprise 
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How  comfortable  do  you 
find  the  hot  seat?  E-mail 
Leadership  and  Management 
Editor  Edward  Prewitt  at 
hotseaWcio.com. 


IT  Gets  Organized:  Introducing 
The  Office  of  the  CIO 

An  Office  of  the  CIO  can  improve  IT  management  and  free  up  the 
CIO.  But  it’s  only  as  good  as  the  deputies  who  fill  the  slots. 


BY  THOMAS  WAILGUM 

Organizational  structure  is  one  tool  that 
CIOs  wield  in  their  perennial  effort  to 
build  a  better  IT  group.  Now  a  new  struc¬ 
ture,  the  Office  of  the  CIO,  or  OCIO,  has 
gained  favor  in  government  and  academic 
circles,  and  is  spreading  to  large  compa¬ 
nies  in  the  private  sector. 

Simply  put,  an  Office  of  the  CIO  struc¬ 
ture  is  a  team-oriented  approach  to  IT 
management  in  which  the  CIO  delegates 
specialized  IT  roles — essentially,  the  ideal 
IT  org  chart.  An  OCIO  is  born  out  of  a 
desire  for  solid  IT  governance  processes — 
a  vision  of  repeatable  IT  processes,  clear 
lines  of  project  accountability  and  consis¬ 
tent  communication  of  standards.  It’s 
meant  to  leave  CIOs  time  to  rub  elbows 
with  their  executive  brethren.  Which  is 
exactly  what  they  should  be  doing. 

“Having  an  OCIO  helps  me  improve 
the  throughput  and  deal  with  the  com¬ 
plexity  that  all  of  the  businesses  are 
dealing  with,  because  my  time  is  now 
more  focused  on  that  very  valuable  face- 
to-face  time  that  I  can  spend  with  my 
peers  and  CEO,”  says  Toyota  Motor 
Sales  CIO  Barbra  Cooper,  who  rolled 
out  an  OCIO  structure  in  January.  “I 
was  thinking  of  the  OCIO  as  beginning 
to  blur  the  lines  between  IT  and  the 
business  function.” 

An  OCIO  can  be  a  remedy  to  the 
increasing  demands  of  business,  says 
Jonathan  Poe,  a  senior  vice  president  at 
Meta  Group.  “Every  business  leader  is 
finding  that  their  world  is  expanding  and 
that  they’re  having  to  do  their  jobs  faster. 
The  question  comes  down  to:  How 
should  I  operate  as  an  executive?  The 
Office  of  the  CIO  empowers  [deputies] 


to  act  as  the  CIO  because  they  are  the 
better  communicator  or  the  operations- 
oriented  coordinator.  They’re  going  to 
do  a  better  job  than  the  CIO.” 

So  if  OCIOs  hold  such  promise,  then 
why  are  there  so  few? 

Perhaps  because  it  takes  a  lot  of  work 
to  run  one  well.  It’s  sometimes  viewed 


Toyota  Motor  Sales  CIO  Barbra  Cooper  is 
a  private-sector  pioneer  in  adopting  the 
CIO  office  structure. 

as  adding  bureaucratic  layers  to  IT 
organizations.  And  an  OCIO  demands 
unusual  CIO  leadership.  “The  mark  of  a 
good  CIO  is  that  he’s  confident  enough 
to  delegate  and  give  up  stuff.  A  lot  of 
CIOs  are  loath  to  give  up  technical  kinds 
of  things,”  says  Dr.  Frank  Clark,  CIO  of 
the  Medical  University  of  South  Car¬ 
olina,  whose  OCIO  structure  is  a  year 
old.  “They  have  to  have  enough  confi¬ 
dence  in  themselves  and  their  teams  to 
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delegate  to  the  Office  of  the  CIO.  Then  it 
becomes  a  little  less  overwhelming.” 

How  to  Elect  Your  Delegates 

OCIO  structures  vary  by  industry,  but 
most  OCIOs  have  a  few  core  responsibil¬ 
ities:  finance,  HR,  vendor  management, 
communications,  infrastructure,  project 
management  and  new  technology.  The 
number  of  functional  directors  within  an 
OCIO  also  varies:  CIOs  and  analysts  rec¬ 
ommend  anywhere  from  four  to  12, 
though  it’s  better  to  start  with  fewer  posi¬ 
tions  and  add  as  necessary. 

It  follows  that  no  blueprint  yet  exists 
for  an  OCIO — you  won’t  find  a  cookie- 
cutter  approach.  It’s  based  on  company 
and  CIO  need.  Cooper  says  CIOs  con¬ 
sidering  an  OCIO  should  begin  by  having 
conversations  with  their  fellow  business 
executives  to  find  out  what  they  need 
from  IT.  You  have  to  know  their  priori¬ 
ties  before  you  can  begin  mapping  your 
OCIO,  she  says.  “The  objective  is  to  try  to 
look  at  this  as  a  much  more  integrated 
view  and  a  process  view — not  just  within 
IT,  but  how  the  functions  need  to  ulti¬ 
mately  map  to  the  business,”  says  Cooper, 
who  settled  on  25  specialists  in  her  OCIO. 

At  the  Medical  University  of  South 
Carolina,  Clark  has  five  directors  in  his 
OCIO,  who  specialize  in  finance  and 
administration,  health-care  and  clinical 
systems,  infrastructure,  academics  and 
research,  and  vendor  contracts.  “These 
people  oversee  and  manage  all  of  the  IT 
initiatives  that  fall  under  their  particular 
purview,”  he  says.  “They  have  enter¬ 
prisewide  coordination  and  oversight  on 
those  projects.” 

Ilee  Rhimes,  CIO  of  The  Ohio  State 
University,  has  10  people  reporting  to 
his  OCIO.  He  has  most  of  the  standard 
areas  covered,  as  well  as  some  that  are  tai¬ 
lored  to  the  needs  of  the  roughly  50,000 
students  and  25,000  employees  on  cam¬ 
pus.  For  example,  a  deputy  CIO  is  in 
charge  of  educational  technology  and 
distributed  learning.  “Our  OCIO  works 


because  of  the  size  and  scope  of  our  oper¬ 
ation,”  says  Rhimes. 

Because  OCIO  directors  need  to  be 
externally  focused,  these  people  should 
have  not  just  IT  experience  but  also  busi¬ 
ness  chops,  OCIO  experts  say.  “You  need 
to  rotate  people  in  and  out  of  the  real 
world.  The  CIO  has  to  make  sure  that 
there  are  operationally  credible  people  in 
there,”  says  Gene  Leganza,  a  vice  presi¬ 
dent  at  Forrester  Research.  “It’s  critical 
for  people  to  understand  that  it’s  not 
going  to  be  an  ivory  tower  organization. 
There  has  to  be  some  thoughtfulness 
involved  in  the  planning.” 

Toyota’s  Cooper,  who  spent  six  months 
thinking  about  her  OCIO,  says  more  than 
half  of  her  directors  are  non-IT  people. 
For  the  finance  and  resource  and  contract 
management  areas,  she  hired  specialists 
who  have  inked  and  managed  big  ven¬ 
tures  before.  “I  needed  people  who  have 
done  deals.  I  wanted  contract  specialists — 
not  just  programmers,”  she  says. 

Oh  No,  Not  an  OCIO! 

In  Spanish,  the  term  ocio  means  “leisure.” 
In  Mexican-Spanish  slang,  it  denotes  “no 
action,”  referring  to  someone  who  has 
nothing  to  do.  Linguistics  aside,  OCIOs’ 
lack  of  popularity  might  have  something 
to  do  with  the  perception  that  they  add 
bureaucracy  and  reporting  layers,  and 
grind  out  decision  making  and  action. 
(Cynics  might  add:  That’s  why  OCIOs  are 
common  in  government  and  academia.) 

Marc  Lewis,  North  American  presi¬ 
dent  of  Morgan  Howard  Worldwide, 
a  technology-focused  executive  recruit¬ 
ing  firm,  estimates  that  fewer  than  2  per¬ 
cent  of  companies  have  an  OCIO. 
“Generally,  adding  another  office  or 
committee  will  slow  things  down,  but 
you  are  always  able  to  find  the  excep¬ 
tion,”  he  says.  CIOs  that  Lewis  has  spo¬ 
ken  with  see  an  OCIO-type  structure 
as  a  means  of  reinvigorating  IT’s  fading 
role  in  big  companies.  “These  CIOs  have 
viewed  the  OCIO  as  more  of  an  imple¬ 


mentation-oriented  consulting  engage¬ 
ment,”  he  says.  “An  OCIO  can  be  the 
first  step  toward  elevating  the  stature  of 
the  IT  function  to  the  executive  commit¬ 
tee  level.”  He  contends  that  the  OCIO 
lifespan  should  not  exceed  two  years 
because  by  then  the  OCIO  should  have 


“moved  the  authority  back  into  the  tra¬ 
ditional  business  and  technology  units. 
They  are  usually  created  as  vehicles  of 
change — not  created  with  intent  to  be  a 
permanent  entity.” 

“In  some  ways,  [an  OCIO]  is  per¬ 
ceived  as  another  layer,  another  sticky 
wicket,”  concedes  Clark.  “It’s  appropri- 


ORGANIZATIONAL  PLANNING 

Howto  Implement 
an  Office  of  the  CIO 

Before  you  fill  out  that  org  chart, 
Forrester  recommends  three  steps: 

1.  Think  through  the  strategic  functions 

that  are  not  being  executed  well  in  the 
current  structure.  Rather  than  following 
a  boilerplate  design,  craft  an  OCIO 
design  that  solves  specific  problems. 

2.  Recruit  internal  or  external  people 

to  head  up  each  function.  Since  these 
managers  will  be  charged  with  the 
difficult  task  of  driving  an  enterprise¬ 
wide  agenda  in  a  stovepipe  organiza¬ 
tion,  they  must  have  excellent  commu¬ 
nication  and  project  management 
skills  and  strong  credibility. 

3.  Communicate  the  broad  impact 

that  an  OCIO  will  have  on  how 
strategic  activities  are  executed. 

The  only  way  to  use  the  disruption  to 
your  advantage  is  to  communicate 
extensively  your  detailed  vision  for 
the  office.  -T.W. 

SOURCE:  “The  Role  of  the  Office  of  the  CIO  in  Federated 
Organizations,"  Forrester  Research,  March  2004 


MANAGEMENT  REPORTS 

Let’s  Start  Meeting  Like  This 


ate  in  certain  IT  organ¬ 
izations — in  organi¬ 
zations  where  the  IT 
environment  is  com¬ 
plex,  in  a  fairly  decen¬ 
tralized  environment. 
In  organizations  where  the  IT  is  centrally 
controlled,  it  obviates  the  need  for  it.” 

Clark  says  his  OCIO  has  led  to  huge 
savings  at  the  Medical  University  of  South 
Carolina.  In  vendor  and  contract  manage¬ 
ment,  Clark’s  deputy  has  been  able  to  con¬ 
solidate  vendor  contracts,  acquire  site 
licenses  and  reduce  maintenance  costs. 
“Typically,  academic  medical  centers  fol¬ 
low  the  best-of-breed  approach,”  Clark 
says.  “We  do  business  with  everyone,  but 
we  have  leverage  with  no  one.  You  dilute 
your  size  and  scale.”  That  has  changed 
with  the  advent  of  the  OCIO,  he  says.  His 
team  has  also  been  able  to  establish  con¬ 
sistent  job  descriptions  and  salary  ranges 
across  his  department — all  of  which  were 
fragmented  before. 

Forrester’s  Leganza  notes  that  an  OCIO 
can  also  help  with  improving  an  organiza¬ 
tion’s  Capability  Maturity  Model  (CMM) 
level  and  with  simplifying  enterprise  archi¬ 
tecture  management.  At  the  University  of 
Illinois  at  Urbana-Champaign,  CIO  Peter 
Siegel’s  OCIO  is  as  much  an  advocacy 
group  as  a  dictatorial  standards-setting 
office — especially  when  it  comes  to  enter¬ 
prise  architecture.  “We’re  giving  [the  uni¬ 
versity]  the  confidence  in  terms  of 
architecture  directions  and  where  we 
want  to  go,”  says  Siegel,  who  has  four 
senior-level  positions  in  his  OCIO — along 
with  specialists  in  security  and  architec¬ 
ture  strategy.  “We  don’t  want  multiple 
groups  going  in  different  directions.  We 
are  looking  for  commonalities.  We  can’t 
have  10  solutions  out  there.” 

Not  surprisingly,  OCIO  users  say  that 
their  decision  making  is  not  slowed  by  the 
extra  layer  of  hierarchy.  “If  you  create  a  sin¬ 
gle  knothole  without  thinking  about  how 
you  deal  with  the  business  demand  side, 
you’re  only  going  to  make  it  worse  with 


Virtual  teams  supplant 
face-to-face  interaction 

Virtual  collaboration  has  become 
standard  practice  at  many  organiza¬ 
tions.  You  probably  know  from  your 
own  experience,  however,  that  e-mail 
tends  to  be  unwieldy,  teleconferences 
are  annoying,  and  videoconferences 
often  look  like  they’ve  been  beamed 
from  Mars.  Meeting  face-to-face  is 
presumed  to  be  the  best  way  of  doing 
business,  even  if  not  always  possible. 

But  a  recent  study  of  virtual  work 
groups  finds  how  they  can  be  more 
productive  and  more  effective  than 
teams  that  always  meet  face-to-face. 
Two  academics  and  two  consultants 
queried  54  virtual  teams  on  what 
made  them  successful  (“Can  Absence 
Make  a  Team  Grow  Stronger?”  by  Ann 
Majchrzak  et  al.,  Harvard  Business 
Review,  May  2004). 

The  researchers  found  that  success 
depends  on  which  technologies  are 
used.  E-mail,  while  essential  in  today’s 
workplace,  quickly  overwhelms  team 
members,  as  multiple  chains  bounce 
back  and  forth.  Videoconferencing  is 
not  quite  ready  for  prime  time;  accord¬ 
ing  to  the  study,  desktop  versions  have 
too  little  bandwidth,  and  remote 
locations  require  too  much  travel. 

But  online  team  rooms,  also  known 
as  virtual  work  spaces,  received  top 
marks  from  successful  virtual  teams. 
These  networked,  file-sharing  spaces 
provide  a  place  for  team  members  to 
access  the  latest  versions  of  files  at 
any  time,  carry  on  asynchronous 
discussions  (without  getting  side¬ 
tracked  into  multiple  conversations), 
and  keep  track  of  deadlines  and  time 
lines.  In  sum,  they  collect  all  relevant 
information  into  one  place. 


The  best  online  team  rooms  in  the 
study  were  fronted  by  easy-to-use 
Web  interfaces.  Virtual  work  spaces 
tended  to  free  up  the  teams  from 
having  to  update  one  another  at  every 
phone  call.  Instead,  the  virtual  teams 
used  their  teleconferences  for  hash¬ 
ing  out  differences  of  opinion. 

A  second  technology  given  a 
thumbs-up  by  successful  virtual 
teams  was  instant  messaging.  The 
teams  found  IM’s  spontaneity  useful. 


Interestingly,  the  teams  tended  to 
install  IM  themselves  if  no  enter¬ 
prisewide  version  was  in  use.  The 
researchers  recommend  that  compa¬ 
nies  now  suppressing  IM  settle  on 
standards  instead. 

It’s  often  pointed  out  that  nonverbal 
cues  are  an  important  dimension  of 
face-to-face  meetings.  For  virtual 
teams,  the  absence  of  body  language 
and  facial  expressions  is  actually  a 
boon  to  productivity,  the  researchers 
said.  Virtual  meetings  are  more 
democratic  than  face-to-face  discus¬ 
sions;  participants  don't  feel  the  effect 
of  hierarchy  as  much. 

-Edward  Prewitt 
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3Com  Builds  a  Better  Network, 
So  You  Can  Build  a  Better  Business 


3Com  designs  comprehensive,  enterprise-wide  communication  solutions  that 
make  powerful  and  sophisticated  technologies  affordable  and  practical. 

Whether  used  for  anchoring  high-traffic  campus  networks  or  powering  small 
remote  offices,  our  routing,  switching,  telephony,  wireless  and  security  solutions 
deliver  world  class  high-performance  and  availability. 

With  over  25  years  of  networking  know-how  incorporated  into  each  and  every 
product,  3Com  lets  you  spend  less  time  worrying  about  your  network,  and  more 
time  growing  your  business. 
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3Com®  Switch  7700  Family 

Chassis  Solution  for  Campus  Networks 

High  Performance  Enterprise 
Switching: 

Build  your  campus  network  core  around 
the  3Com  Switch  7700.  Choose  the 
chassis  configuration  to  match  your 
needs.  Resilient  architecture  supports 
redundant  switch  fabrics  and  hot-swap 
modules.  Achieve  densities  of  120 
Gigabit  or  288  10/100  ports.  10  Gbps 
ready  to  help  protect  your  investment. 
An  exceptional  value  over  what  other 
vendors  will  offer.  Act  now,  trade  in 
your  old  equipment  and  receive  1 5% 
off  a  new  purchase  of  eligible  3Com 
switches.  For  more  information  go  to 
www.3com.com/tradeup 

"Most  of  the  vendors  we  evaluated 
offered  high-speed  solutions,  but  none 
featured  3 Corn's  practicality,  simplicity, 
and  ease  of  use. " 

Larry  Padgett 
Director  of  Network  Services 
Palm  Beach  County  School  District 
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one  entry  way,”  says 
Cooper.  “We’ve  cen¬ 
tralized  that  inbound 
demand,  but  we’ve  set 
ourselves  up  on  the 
back  of  the  wall  with 
a  much  more  streamlined  set  of  processes 
with  a  degree  of  transparency  about  what 
this  stuff  is.  It’s  more  efficient  to  manage  it 
and  describe  it.” 

But  the  OCIO’s  biggest  benefit,  sup¬ 
porters  say,  is  that  it  allows  them  to  lead 
an  IT  department  the  way  they  ought  to: 
focusing  on  the  business  needs  and  edu¬ 
cating  other  executives  about  IT.  “The 
improved  communication  at  the  higher 
levels  allows  the  executive  leadership  to 


“An  OCIO  is  appropri¬ 
ate  in  certain  IT 
organizations  in  a 
fairly  decentralized 
environment.  In 
organizations  where 
the  IT  is  centrally 
controlled,  it  obviates 
the  need  for  IT.” 

-Dr.  Frank  Clark,  CIO,  Medical 
University  of  South  Carolina 


view  technology  as  an  investment,”  says 
Ohio  State  University’s  Rhimes. 

Gaining  that  high-level  perspective  is 
what  every  CIO  desperately  needs.  “CIOs 
can  be  down  in  the  weeds,”  says  Clark. 
“But  their  primary  role  is  leadership:  set¬ 
ting  a  goal,  a  vision,  a  direction,  and  moti¬ 
vating  and  inspiring.  The  really  good 
people  know  how  to  work  smart.  Work¬ 
ing  smart  is  surrounding  yourself  with 
good  people  and  not  trying  to  solve  every 
problem  yourself.”  HID 


Staff  Writer  Thomas  Wailgum  can  be  reached  at 
twa  i  lgum@cio.  com . 


Leadership  Agenda 

BY  SUSAN  H.  CRAMM  AND  MIKE  CLIFFORD 

Take  Back 

Enterprise 

Technology 

It’s  time  for  CIOs  to  stand  up  to  rapacious  vendors 

Business  in  the  enterprise  technology  arena  is  getting 
nasty.  Vendors  in  the  mature  markets,  facing  declining 
new  license  revenue,  are  doing  everything  they  can  to 
generate  additional  income  and  drive  efficiencies.  Mean¬ 
while  smaller  enterprise  technology  vendors  operate 
under  the  threat  of  extinction. 

CIOs  believe  that  many  of  the  large  enterprise  vendors 
have  crossed  over  the  line  to  customer  abuse.  Because  their  customers  are 
captive,  big  vendors  are  taking  every  opportunity  to  exploit  poorly  negotiated 
or  ambiguous  contract  terms.  For  example,  they  continue  to  charge  mainte¬ 
nance  fees  for  modules  never  implemented,  increase  maintenance  fees 
regardless  of  support  history,  broaden  the  definition  of  seats  to  include 
Internet  hits,  and  force  upgrades  even  though  additional  functionality  is  of 
no  value  to  their  customers. 

These  tactics  result  in  invoices  that  generate  shock  and  awe  in  the  vendors’ 
customers.  CIOs  scramble  to  get  legal  opinions  and  try  to  define  effective 
negotiation  strategies— when,  in  fact,  vendors  are  contractually  within  their 
rights.  Even  though  vendors  often  eventually  reduce  the  original  demands  by 
as  much  as  75  percent,  memories  of  acrimonious  e-mails  and  negotiation 
meetings  remain  (along  with  substantial  cost  increases  that  contribute  to  the 
enterprise  technology  financial  hangover  borne  largely  on  the  shoulders  of 
CIOs).  In  retrospect,  a  lot  of  contracts  out  there  favor  the  vendor  due  to  the 
relative  lack  of  sophistication  of  the  customer  a  decade  ago.  (The  customer's 
technological  knowledge  bordered  on  ignorance  compared  to  its  vendor  and 
systems  integrator  counterparts— who,  at  times,  advised  clients  while  foster¬ 
ing  strategic  relationships  with  the  technology  vendors.) 

Unfortunately,  CIOs  have  few,  if  any,  real  options  to  restore  some  equity 
into  the  vendor-user  relationship.  They  can't  subject  their  organizations  (or 
careers)  to  replacing  enterprise  technologies.  And  even  if  a  few  CIOs  were 
willing  to  martyr  themselves,  there  would  be  little  point.  What  well-estab¬ 
lished  vendor  in  its  right  mind  would  redefine  its  business  model  and  risk 
incurring  the  wrath  of  Wall  Street,  just  to  satisfy  what  it  perceives  as  a  few 
errant  CIOs? 

If  wholesale  replacement  is  untenable  for  any  rational  CIO,  what  can  we  do? 
First  of  all,  we  have  to  keep  the  end  goal  in  mind:  We  want  component-based 
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protection: 
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networks  and  systems. 

Learn  new  strategies  for  securing  your  servers  and  protecting 
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architectures  that 
we  pay  for  based  on 
usage.  Even  if  we 
don't  achieve  the 
open  source-Web 
services  Holy  Grail, 
at  the  very  least  we  need  to  break 
through  the  "all  or  nothing”  model  of 
integration  and  support  offered  by  the 
large  enterprise  players.  Consider  the 
following  actions  to  reshape  the 
marketplace  and  protect  your  long¬ 
term  interests. 

Do  it  yourself.  If  you  haven’t  already 
made  big  investments  in  enterprise 
technologies,  you  have  great  leverage 
and  options.  Understand  your  real 
requirements.  If  your  industry  business 
processes  have  not  been  addressed  by 
the  big  guys,  you  may  be  better  served  by 
following  the  lead  of  one  of  CIO’s  2004 
Enterprise  Value  Award  winners, 
Worldspan,  which  was  able  to  realize 
substantial  supply  chain  improvements 
at  dramatically  reduced  costs  by  leverag¬ 
ing  its  existing  systems  (see  “They  Got  It 
Together,"  www.cio.com/printlinks ). 

Support  the  small  guys.  You  may  not 
need  all  the  functionality  offered  by  the 
larger,  mature  players.  Smaller  ven¬ 
dors'  solutions,  in  combination  with 
some  in-house  efforts,  provide  benefits 
that  justify  the  additional  risk.  Smaller 
vendors  may  offer  architectural,  and 
service  and  support  advantages.  And 
they  may  be  willing  to  work  within  a 
“pay  for  use”  deal.  (The  benefits  for  the 
vendors  are  exclusivity,  higher  initial 
payments  and  walk-away  penalties.) 

Don’t  buy  more  than  you  need. 
Anything  you  buy  today  reduces  your 
future  leverage.  When  the  phone  rings 
at  the  end  of  the  month,  quarter  or 
year,  don’t  be  lulled  by  volume  dis¬ 
counts  and  capitalization  rules  into 
buying  more  than  your  organization 
really  needs  or  can  effectively  use  in 
the  foreseeable  time  frame.  Besides, 
anything  you  save  today  is  just  a 


fraction  of  the  overall  cost  of  imple¬ 
mentation.  If  it  makes  sense  to  buy,  it 
also  makes  sense  to  reexamine  and 
renegotiate  some  of  the  terms  of  your 
existing  contract. 

Utilize  good  counsel.  Get  a  state-of- 
the-art  contract.  Go  outside  your 
organization  (if  necessary)  to  acquire 
the  support  of  experienced  IT  negotia¬ 
tors  and  legal  counsel.  Be  sure  to 
clarify  critical  definitions  and  cap 
increases,  minimize  up-front  pay¬ 
ments,  and  get  the  most  out  of  the 
warranty  periods  by  specifying  start 
dates  and  longer  terms. 

After  all,  we  gave  the  large  enter¬ 
prise  technology  vendors  the  chains 
that  bind  us:  poorly  negotiated  con¬ 
tracts,  big  up-front  payments,  and 
business  customers  who  are  tired  and 
want  to  just  move  on.  It’s  now  time  to 
break  those  chains,  link  by  link.  Even¬ 
tually,  we  will  be  treated  like  real 
customers,  able  to  buy  what  we  need, 
when  we  need  it,  from  anybody  we 
choose. 


Reader  Q&A 

Susan  H.  Cramm  and  Mike 
Clifford  answer  questions 
on  “Take  Back  Enterprise 
Technology ” 

Q:  Is  there  enough  energy  to  effectively 
resist  the  shift  toward  the  emergence 
of  a  Microsoft-type  vendor  because  of 
the  complexity  of  enterprise  solutions, 
economies  of  scale,  mergers  and 
acquisitions,  and  failures  in  the  enter¬ 
prise  technology  space? 

A:  The  answer  to  this  question  rests 
with  you  and  your  peers.  Many  CIOs 
answer  no.  As  a  result,  the  demand  side 
has  become  complacent  and  has  taken 
a  defeatist  point  of  view.  The  movie 
Network  (“I’m  mad  as  hell  and  I’m  not 
going  to  take  it  anymore!”)  comes  to 


mind  and  gives  us  a  sense  of  optimism. 
Your  actions  can  make  a  difference 
because  markets  are  transformed  by 
the  combined  impact  of  many  small 
changes  in  buying  behavior.  We  are 
confident  that  new  vendors  will  emerge 
because  they  can  see,  as  we  all  do,  that 
people  are  paying  too  much  for  too 
little.  The  future  vendors  will  probably 
not  be  the  ones  that  are  dominant 
today— for  the  reasons  articulated  in 
Clayton  Christensen’s  book  The  Innova¬ 
tor's  Dilemma.  Successful  companies 
have  a  difficult  time  retiring  their 
current  products  and  marketing  prac¬ 
tices  in  spite  of  smart  management  and 
healthy  R&D  budgets. 

Q:  How  much  of  this  “abuse”  is  purely 
the  domain  of  the  software  vendors? 
How  much  comes  from  consultancies 
that  continue  to  push  the  enterprise 
software  agenda,  sometimes  regardless 
of  client  needs?  Despite  all  the  current 
hype  about  applying  their  deep  industry 
knowledge,  the  majority  of  consulting 
houses  make  the  lion’s  share  of  their 
revenue  from  enterprise  software 
implementations. 

A:  Your  experience  is  in  line  with  Mike 
Clifford’s  and  many  others.  As  we  all 
know  (but  sometimes  forget  in  the  heat 
of  the  battle),  consultants  and  vendors 
work  for  their  shareholders— not  yours. 
It’s  their  job  to  try  to  sell  you  what  they 
have  (and  sometimes  don’t  really 
have),  and  it’s  your  job  to  know  what 
you  need,  select  your  vendors  and 
define  transaction  terms  that  work 
for  you.  BE! 


To  see  more  reader  questions  and  answers 
from  Susan  H.  Cramm,  go  to  www.cio.com/ 
leadership/agenda. html.  Cramm  is  founder  and 
president  of  Valuedance  ( www.valuedance.com ), 
an  executive  coaching  firm  in  San  Clemente,  Calif. 
You  can  contact  her  at  susan@valuedance.com. 
Mike  Clifford  is  vice  president  and  CIO  of  Whole 
Foods  Market. 
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On  Monday,  January  12,  security  thought  leaders  convened  in 


Washington  D.C.  to  discuss 


BALANCING  HOMELAND  SECURITY  WITH  CORPORATE  PROSPERITY 


Richard  Falkenrath,  Homeland  Security,  The  White  House 


Admiral  Thomas  Collins.  Commandant,  U  S.  Coast  Guard 


Arthur  R.  Miller,  Harvard  law  professor/TV  commentator 


Moderator  Arthur  R.  Miller  engages  high-level  business  and  government  leaders  in  a  lively  debate. 
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COVER  STORY 
The  Sarbox  Conspiracy 

By  Christopher  Koch  I  58 

Sarbanes-Oxley  could  make  heroes 

out  of  CIOs.  Potentially,  CIOs  could 
orchestrate  Sarbox  compliance  efforts 
to  automate  and  streamline  business  processes 
and  financial  controls,  driving  down  compli¬ 
ance  costs  while  improving  business  per¬ 
formance.  But  CIOs  who  play  only  a  tactical 
compliance  role,  focusing  on  IT-specific  con¬ 
trols  and  leaving  the  rest  to  the  CFOs  and 
accountants,  may  be  doomed  to  be  perceived 
as  back-office  executives  forever  subservient 
to  finance — which,  according  to  many,  is 
exactly  finance’s  agenda.  Unfortunately,  Sar¬ 
box  has  become  a  way  for  CFOs  to  assert 
control  over  IT  and  displace  the  CIO  as  the 
company’s  business  process  expert.  Aiding 
CFOs  in  this  power  grab  are  the  Big  Four 
accounting  firms,  desperate  to  reassert  them¬ 
selves  and,  as  a  bonus,  grab  a  windfall  in 
much-needed  consulting  revenue.  This  story 
explores  ways  CIOs  can  fight  efforts  to  push 
them  to  the  Sarbox  sidelines,  and  how  they 
can  share  Sarbox  leadership  with  finance. 


Many  CFOs  would  like  to 
see  CIOs  left  out  of  the 
Sarbanes-Oxley  equation, 
because  “it  would  give 
CFOs  control  over  one  of 
the  largest  fixed  costs  in 
the  company:  IT.” 

-C.  LEE  JONES,  CHAIRMAN  AND  CEO, 
ESSENTIAL  GROUP 


Mutual  Benefits  By  Elana  Varon  I  68 

FOR  THE  SCANDAL-TAINTED  MUTUAL  FUND  INDUSTRY,  using  IT  to  improve  regula¬ 
tory  and  internal  policy  compliance  is  critical  to  restoring  investor  confidence.  Tighter  integration  of 
the  mutual  fund  supply  chain  also  improves  efficiency  and  boosts  shareholder  returns.  Part  of  the 
information  exchange  along  this  chain  is  still  manual,  leaving  investors  vulnerable  to  trading  abuses 
and  subject  to  high  fund  management  fees.  Straight-through  processing  automates  transactions  in  the 
supply  chain  (which  includes  fund  companies,  brokers,  401  (k)  plan  administrators,  and  middlemen 
who  aggregate,  clear  and  reconcile  transactions).  Such  automation  will  be  pricey,  but  most  agree  that 
it  will  help  restore  the  integrity  of  the  business  and  save  money  to  boot. 


An  Ounce  of  Prediction  By  Alice  Dragoon  I  78 

WHILE  HEALTH-CARE  COSTS  ARE  SWELLING  10  to  15  percent  a  year,  predictive  model¬ 
ing  helped  Pitney  Bowes  slash  the  median  cost  of  care  for  diabetic  and  asthmatic  employees  by  as 
much  as  15  percent  since  2001.  When  predictive  modeling  revealed  patterns  of  escalating  costs  in  the 
New  York  area  and  generally  for  employees  with  certain  illnesses,  Pitney  execs  convinced  the  com¬ 
pany  to  trust  the  data  and  try  something  radical:  Lower  the  cost  of  coverage  for  those  employees. 
Now  employees  can  get  colonoscopies,  mammograms  and  immunizations  either  free  or  for  a  mini¬ 
mal  copay.  To  get  employees  with  common  chronic  illnesses  to  take  their  meds,  Pitney  Bowes  did 
away  with  a  three-tiered  pricing  structure,  making  all  drugs  available  at  the  low  generic  rate.  The 
company  has  been  innovative  in  its  use  of  predictive  modeling  because,  unlike  many  modeling  practi¬ 
tioners,  it  developed  programs  to  address  the  patterns  its  models  uncovered.  Now  the  company  is 
pioneering  predictive  modeling  for  competitive  advantage.  It  wants  to  pinpoint  the  ideal  combination 
of  benefits  that  motivate  employees  to  perform  better  at  work  in  the  hope  of  increasing  profits. 


Operation  Clean  Data  By  Malcolm  Wheatley  I  84 

DIRTY  DATA  ISN*T  A  NEW  PROBLEM,  but  the  costs  and  consequences  of  inaccurate  infor¬ 
mation  are  rising  exponentially.  Throw  in  the  complications  arising  from  merging  different  data  sets 
together,  as  in  the  aftermath  of  a  merger  or  acquisition,  and  the  difficulties  of  data  cleansing  multiply. 
Data  cleansing  veterans  from  the  British  Ministry  of  Defence,  the  U.S.  Census  Bureau,  and  real  estate 
and  hospitality  conglomerate  Cendant  have  learned  how  to  surmount  the  technical  challenges,  and 
how  to  align  IT  staff  with  the  business  to  ensure  that  the  task  gets  done  right.  The  first  step  should 
be  figuring  out  what  data  is  mission-critical  and  what  isn’t.  It’s  crucial  to  involve  the  business  units 
that  own  the  data  when  coming  up  with  precise  rules  that  define  what  constitutes  dirty  data.  That 
includes  figuring  out  in  advance  whether  98  percent  clean  is  good  enough,  or  whether  100  percent 
is  required  or  affordable. 


Hot  Seat:  Office  of  the  CIO  By  Thomas  Wailgum  I  92 

AN  ORGANIZATIONAL  STRUCTURE  DUBBED  the  Office  of  the  CIO,  or  OCIO,  has  gained 
favor  in  government  and  academic  circles  and  is  spreading  to  large,  private-sector  companies.  In  an 
OCIO,  the  CIO  delegates  important  responsibilities — including  finance,  HR,  vendor  management, 
communications,  infrastructure,  project  management  and  new  technology.  In  instituting  OCIOs, 
CIOs  aim  to  improve  IT  governance  and  free  up  their  time  to  work  directly  with  their  fellow  business 
executives.  Detractors  say  OCIOs  add  bureaucratic  layers  to  IT  organizations.  Others  view  OCIOs 
as  an  effective  but  temporary  means  of  reinvigorating  IT.  Supporters  of  OCIOs  say  they  save  money, 
however,  and  elevate  the  CIO’s  ability  to  lead  IT. 
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Our  MPLS  network 
is  fast  becoming  one 
of  America’s  largest. 
Anyone  need  a  ride 
to  the  future? 
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BT’s  growing  IP  network 
will  soon  reach  86%  of 
corporate  America,  giving 
your  company  the  flexible, 
global  communications 
platform,  from  domestic 
VPN  services  to  international 
networks  —  and  the  applications 
you  need.  Want  to  boost  the 
performance  of  your  Information 
and  Communications  Technology 
in  the  U.S.  and  around  the  world? 
Talk  to  BT.  And  hop  on. 
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More  power  to  you 


To  learn  more,  go  to  bt.com/globalservices  or  call  800.331.4568. 

BT  operates  in  the  U.S.  through  its  wholly  owned  subsidiary  BT  Americas  Inc.  ©  BT  Americas  Inc.  2004 


THE  NEW  UTILITY. 

Ready  to  move  to  Utility  Computing?  We  have  the  building  blocks.  Start  with  storage  for  better  availability  and 
performance.  You  can  reduce  your  hardware  costs,  regardless  of  vendor.  Software  for  Utility  Computing,  veritas.com 
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